Difference between revisions 657189438 and 657271178 on enwiki

The standardization of Trusted Storage (sometimes referred to as Trusted WORM) along with an agreed upon definition on how Trusted Storage sub-systems inter-operate with document and records management technologies began in 2013.  This effort began as a result of increasing requirements for organizations to store business and/or official records in a storage environment compliant with relevant governmental and regulatory requirements that ensure information is properly protected.   The Trusted Storage standardization work is being completed by [http://www.iso.org/iso/standards_development/technical_committees/other_bodies/iso_technical_committee.htm?commid=53666 ISO TC/171 SC1/WG8] (ISO 18759).   This International Standard specifies functional and technical requirements associated with Trusted Storage sub-systems that enable organizations, including product suppliers, to develop/configure products and technologies that store and manage content stored in non-alterable environments preventing modification or deletion during the life cycle of the content following organizational policies and procedures. This standard also specifies reporting requirements to ensure that content is no unknowingly altered during its prescribed retention cycle.  The current ISO convener for this effort is [http://www.eid-inc.com/robert-blatt/ Mr. Robert Blatt],  US/ANSI Expert to ISO TC/171

Organizations storing digital content or ESI (Electronically Stored Information) as business records have increasing sought guidance on how to design, implement and manage information and content management systems in such a way as to guarantee the reliability, authenticity and integrity of the records contained within the system throughout their entire life cycles.  In addition to the requirements of normal business purposes, the need to ensure the reliability of records has come from legal mandates in the form of statutes and regulations, as well as well as admissibility standards as relate to legal proceedings.

Standard setting bodies such as ISO, ANSI and [<ref>http://www.aiim.org/standards</ref> AIIM] have developed the concept of a “trusted system” in order to provide clear and concise, vendor neutral requirements for information and content management systems used to manage content as reliable and legally admissible records. As defined by <ref>ISO 15801</ref>, a trusted system is “a system used to store electronic information in an accurate, reliable and usable / readable manner, ensuring integrity over time.” 
 
At a minimum, a trusted system stores at least one copy of the record on media that prevents unauthorized deletions and that is stored in a different location from the original content.  In particular, it meets the following criteria:

(contracted; show full)

The Trusted Storage standard (ISO 18759) for trusted storage environments addresses both these criteria and will therefore provide guidance to organizations seeking to meet diverse legal requirements and mandates as regards the production and management of their electronic records.