en en en en en en en en en en en en en en en en en en en en en en en en en en en en en en en en en en en en en en en en en en en en en en en en en en en en en en en en de en en en fr fr en en en en en en en en en en en pt en en en en en en en en en en en en en en
You'd like to find out more about the range of services offered by the msg group?  Then visit the websites of msg and its group companies.
Select a company... msg-Gruppe BELTIOS GmbH CONPLAN GmbH finnova AG Bankware innovas GmbH Legacy Portfolio Partners GmbH m3 management consulting GmbH minnosphere GmbH msg advisors msg communications GmbH msg compliance GmbH msg DAVID GmbH msgforbanking msg GillardonBSM AG msg global solutions ag msg industry advisors ag msg life ag msg PLAUT msg services GmbH msg systems ag msg systems Österreich msg systems Romania msg systems Schweiz Nexontis Consulting GmbH Optravis LLC PiAL Consult GmbH Prevo-System AG Softproviding AG
A regulation-compliant goodbye to paper documentation
Substitute scanning ensures data integrity and preserves evidential value.
Even in the highly regulated environment of the pharmaceutical and medtech industry, a legally compliant and fully digital archiving of documents is possible. "Substitute scanning" provides the necessary basis.
Paper or digital format? As soon as it comes to documents that have to be retained, most companies in the process industry nowadays use a "hybrid solution": Documents are not consistently captured, stored and updated digitally, but are generally filed in paper form in order to comply with the relevant legal requirements. At the same time, in day-to-day business, people work with scans, for example, which then ultimately have to be printed out on paper and stored accordingly. The legal security is offset by high archiving costs, and, at the same time, the storage space needed for the ever-increasing amounts of paper can result in follow-up costs.
Complete document digitization solves these challenges. By using "substitute scanning", it is possible to do this in a legally compliant way. This procedure replaces hybrid documentation with fully electronic recording and archiving of production and quality documents, including all raw data and reports, in a manner that complies with regulations and preserves the evidential value of all documents. This results in "true copies".
"A complete digitalization of documents is possible in a compliant manner."
Gains in efficiency and resources
It also eliminates the need for paper archives in the future. This can save a considerable amount of storage space and reduces costs for archive management or for security measures such as fire protection. When it comes to deciding between financing a new building for storing paper documents or digitization of archives, the second option usually quickly proves to be more profitable.
"Unlike with new buildings, digitization of archives usually pays off quickly."
Guidelines for regulation-compliant scanning and storing process
Those who decide in favour of legally compliant and complete digital archiving should do so with the awareness that this must be accompanied by a complete and consistent move from the paper format – after all, no digitization initiative/strategy is meaningful if the employees continue to print out documents.
The crucial starting points for such an initiative are two guidelines issued by the German Federal Office for Information Security (BSI): TR-03138 for substitute scanning (RESISCAN) and TR-03125 for preserving the evidential value of cryptographically signed documents (ESOR). These guidelines represent the current state of the art.
TR-RESISCAN – substitute scanning
This guideline applies to all electronic recording processes when converting paper-based original documents to digital copies. It considers the loss of security features of the paper-based document (type, texture, ink, etc.) and defines a secured scanning process that preserves the evidential value of the scanned document and thus ensures the ability of the document to serve as a proof in a compliant manner.
TR-ESOR – preservation of the evidential value of cryptographically signed documents
What needs to be taken into account though when making this "transformation" from paper documents to digital storage? The BSI guideline on the TR-ESOR procedure addresses how to secure integrity as well as how to securely retain/store scanned and cryptographically signed documents while preserving their evidential value over the long term. For example, it outlines the procedure for digital approval processes using electronic signatures and digital seal and time stamp formats. It also regulates the cross-company information exchange of "true copies".
By eliminating hybrid documentation in a legally compliant way, TR-ESOR provides an internationally established standard that ensures maximum data integrity. The implementation of both guidelines also ensures that scanning and archiving no longer lead to integration gaps due to discontinuity of media.
"TR-ESOR ensures maximum data integrity by eliminating hybrid documentation."
Scanning concept for substitute scanning
Companies that want to develop a concept for substitute scanning should divide this process into six successive phases. The initiation phase focuses on compiling generic content and previous insights from actual as-is analyses and wh-questions that the scan concept should contain. Based on this, the sequence and practical implementation of the scanning process (visual/textual) are then designed. This process should be included as a user story in the requirement specification for the scanning software. The third phase involves specifying the target processes as well as technical, organisational, personnel and security measures.
In the fourth phase the issue of preserving evidential value with the TR-ESOR middleware is addressed. Here, only the functional and technical requirements are to be included in the user requirement specification for the TR-ESOR middleware. Then, the overall architecture of the scanning system, the TR-ESOR middleware and the target systems must be defined. In the final phase, the completed scan concept can be used as a blueprint for rollout in other areas.
Substitute scanning vs. traditional paper processing (click on image to enlarge) © msg advisors
Always implement substitute scanning in tandem with the introduction of a TR-ESOR solution.
Integrate substitute scanning into your organization's digitalization strategy and input/output management.
Note that substitute scanning requires electronic processing, but not an e-file (e.g., e-invoicing, CAFM, etc.).
Consider the use of cryptographic security for substitute scanning in the context of your organization's digitalization, for example regarding elements of your IT security strategy.
Head of Life Science Services & MedTech
Dr. Dennis Janning | Head of Life Science Services & MedTech
Dr. Dennis Janning is a manager at msg industry advisors. As Head of Life Science Services & MedTech, he is responsible for the operational implementation of time- and quality-critical customer issues.
msg industry advisors ag
+49 89 96 10 11 300
+49 89 96 10 11 040
Form Download PDF Modal Link (EN)
Ergon Design GmbH becomes part of the msg group
Secure digital identities with msg mySaveID GmbH – a new msg group company
msg acquires Bern-based ICT consulting company baeriswyl tschanz & partner ag
msg is now a member of BITKOM
Merge of msg services and msg treorbis as msg services GmbH
msg is an independent international group of companies with autonomous regional companies and subsidiaries and over 9,000 employees.
The msg group is active in over 25 countries in the banking, insurance, automotive, food, life science & healthcare, public sector, telecommunications, travel & logistics and utilities sectors. msg also develops integrated software solutions and advises its clients in all aspects of information technology.
© 2022 msg industry advisors ag
The msg industry advisors ag uses cookies to provide an optimal website experience that is tailored to your specific needs. These includes cookies that are necessary for ensuring the smooth operation and the security of our web pages, as well as those used for anonymous statistical purposes, to help us reach our commercial business goals, or to display personalized content. You have the right to choose which categories you wish to allow. Please note that your decisions may affect which page functions are available while using our site. Further information can be found in our data protection information.
Required cookies are used to ensure the smooth operation of our web pages and to make them user friendly. They also enable security-related functions. Furthermore, these types of cookies help us identify whether you would like to remain logged in under your profile, thereby allowing us to make our services available to you even faster the next time you visit our site.
In order to ensure continuous improvement of our content, structure and our website in general, we record anonymized data for statistical purposes. With your consent, data on your user behavior will be transmitted anonymously to Google Analytics. We use these cookies, for example, to determine how many times a specific page is accessed or the effect of certain pages of our web presence; we then use that information to optimize our site.