transaction is recurring and special reports completed or responses to findings and recommendations superseded, but reports of follow-up activities longer retention statistical performance data is authorized if metrics required for inventory of web activity business use. web use statistics comments/feedback from web site or application users internal and external reporting for compliance requirements relating to the Privacy Act, and electronic and Information technology accessibility under Section 508 of the Rehabilitation Act system availability reports target IT architecture reports systems development lifecycle handbooks computer network assessments and follow-up documentation vulnerability assessment reports assessment and authorization of equipment Independent Verification and Validation (IV&V) reports contractor evaluation reports quality assurance reviews and reports market analyses and performance surveys benefit-cost analyses make vs. buy analysis reports on implementation of plans compliance reviews data measuring or estimating impact and compliance Note: Copies of security plans are scheduled under the GRS for Information Security Records. There may be copies interfiled within this series.
recurring and special reports responses to findings and recommendations reports of follow-up activities statistical performance data metrics inventory of web activity web use statistics comments/feedback from web site or application users internal and external reporting for compliance requirements relating to the Privacy Act, and electronic and Information technology accessibility under Section 508 of the Rehabilitation Act system availability reports target IT architecture reports systems development lifecycle handbooks computer network assessments and follow-up documentation vulnerability assessment reports assessment and authorization of equipment Independent Verification and Validation (IV&V) reports contractor evaluation reports quality assurance reviews and reports market analyses and performance surveys benefit-cost analyses make vs. buy analysis reports on implementation of plans compliance reviews data measuring or estimating impact and compliance Note: Copies of security plans are scheduled under the GRS for Information Security Records. There may be copies interfiled within this series. transaction is completed or superseded, but longer retention is authorized if required for business use.
grs03-1.docx