*GR5825-01 SYSTEM SECURITY . RECORDS *GR5825-01a SYSTEM SECURITY Records created for security purposes to US, date of expiration, RECORDS control or monitor individual access to a or date of separation + system and its data, including but not 2 years, as applicable. limited to user account records, security login information, and password files. *GR5825-01b SYSTEM SECURITY Records used to control and monitor the AV. RECORDS security of a system and its data, including vulnerability scans, intrusion tests, malicious code detection tests, threat and risk assessments, technical security reviews, patch management logs, intrusion detection logs, firewall logs, and related records. Records documenting incidents and investigations involving unauthorized attempted entry, probes and/or attacks on information systems or networks. GR5825-02 BATCH DATA ENTRY Forms and logs used to reconcile batches AV after reconciliation CONTROL RECORDS submitted for processing against batches confirmed. received and processed. GR5825-03 CHARGEBACK RECORDS Records used to document, calculate costs, FE + 5 for school TO DATA PROCESSING and bill program units for computer usage districts; FE + 3 years SERVICES USERS and data processing services. These records for other local are also used for cost recovery, budgeting, governments. or administrative purposes. Schedules or similar records showing 90 days. GR5825-04 COMPUTER JOB SCHEDULES AND computer jobs to be run and reports by REPORTS computer operators or programmers of work performed. Reports, studies, analyses, projections, and 5 years. Review before disposal; GR5825-06 DATA PROCESSING Retention Note: PLANNING RECORDS similar records concerning the creation, some records of this type may development, or modification of data PERMANENT retention for historical processing systems and services. reasons. *GR5825-07 [WITHDRAWN SEE – GR5750-07]
*GR5825-01 SYSTEM SECURITY RECORDS . *GR5825-01a SYSTEM SECURITY RECORDS Records created for security purposes to control or monitor individual access to a system and its data, including but not limited to user account records, security login information, and password files. US, date of expiration, or date of separation + 2 years, as applicable. *GR5825-01b SYSTEM SECURITY RECORDS Records used to control and monitor the security of a system and its data, including vulnerability scans, intrusion tests, malicious code detection tests, threat and risk assessments, technical security reviews, patch management logs, intrusion detection logs, firewall logs, and related records. Records documenting incidents and investigations involving unauthorized attempted entry, probes and/or attacks on information systems or networks. AV. GR5825-02 BATCH DATA ENTRY CONTROL RECORDS Forms and logs used to reconcile batches submitted for processing against batches received and processed. AV after reconciliation confirmed. GR5825-03 CHARGEBACK RECORDS TO DATA PROCESSING SERVICES USERS Records used to document, calculate costs, and bill program units for computer usage and data processing services. These records are also used for cost recovery, budgeting, or administrative purposes. FE + 5 for school districts; FE + 3 years for other local governments. GR5825-04 COMPUTER JOB SCHEDULES AND REPORTS Schedules or similar records showing computer jobs to be run and reports by computer operators or programmers of work performed. 90 days. GR5825-06 DATA PROCESSING PLANNING RECORDS Reports, studies, analyses, projections, and similar records concerning the creation, development, or modification of data processing systems and services. 5 years. Retention Note: Review before disposal; some records of this type may PERMANENT retention for historical reasons. *GR5825-07 [WITHDRAWN – SEE GR5750-07]
Schedule%20GR%20Revised%205th%20-%20Effective%202016-04-17.docx