STEP 1 - Appraise

The first thing that needs to be done is to get an understanding of what records are in the system or application to be decommissioned.

The people who created or who manage the functions related to them are often the best sources of information when it comes to understanding what the records are about. 

If the appraisal has already been done and retention periods have been assigned, all you need do is determine which ones will need the most attention. Records that are high value or high risk will need to be managed carefully to ensure they remain useable. 

Conducting appraisal of the records involves understanding what the records are and how they relate to the functions and activities of the agency. Records can only be lawfully destroyed or transferred out of the custody of an agency when they have been properly sentenced using the relevant Retention and Disposal Authority (RDA).

STEP 2 - Migrate

After finishing the appraisal and identifying which records are high value high risk, the next thing is to determine which ones will need to be extracted and migrated so they can continue to be used and managed.

If possible, the records should be migrated to a system or drive that is being actively managed as the platform, software and other elements necessary for the records to remain readable will more likely be supported in an actively managed environment.

Records that have been sentenced as permanent and are no longer required by the business should be transferred to PROV.

Developing a migration strategy for the records will enable key requirements (including both technical and recordkeeping) to be identified and addressed. The strategy should include an action plan that identifies the records being transferred, including their metadata, where the records are to be migrated to, and how the metadata will be mapped to that used by the new drive or system.

STEP 3 - Manage

If the records cannot be extracted from the system or drive then it will need to be actively managed for as long as the records are needed.

A management plan should be developed outlining how the system or drive will be managed to ensure the records remain readable and useable for the duration of their retention periods.

Records that do not need to be retained for very long or that are of low value and low risk may remain on the drive or system after it has been switched off. Even so, a management plan for the system or drive should be developed so the records can be managed offline for as long as needed. This may involve conducting a regular series of checks of samples of records (using a consistent and documented sampling method) to identify signs of corruption or other risk to the records so they may be mitigated while the records remain required.