Australian Software Asset Management Association

Rule

 

 

Software Asset Management 

Record Keeping

 Print this page (Known IE printing problem) 

       

        ASAMA

 

Record keeping is an important activity that needs to be continuously undertaken by the SAM team. There will always be a requirement to obtain records from a previous time. The reasons could be quite wide ranging from a simple procurement receipt to a large scale discovery for a litigation matter, for whatever reason the fact is that you will need previous records and you do not want to spend any additional time than is necessary, to find them.

Any SAM record needs to be checked to ensure they are accurate and complete prior to them being stored in the organisations record keeping system. Depending on the rules for record storage that have been specified by the record keeping system business rules, all related records should be stored together or are accessible from a related record. If the record keeping system supports searchable meta tags, ensure that the related documents have similar meta tags that will be identified when a Search is undertaken.

SAM records are not confined to just licence entitlements and actual usage. All contract documentation, vendor written and recorded verbal conversations, reseller written and recorded verbal conversations, licence agreements, quotes, offers and commitments. Governance documents used for internal organisation requirements for business planning, financial management, risk management, audit reports, Minutes and agenda’s, correspondence in and out, service level agreements and other important documents need to be stored in the record keeping system.

In practice all paper records should be converted to scanned digital records to improve accessibility and the length of time they can be kept for. A scanned digital record will be easier to manage, backup and is as authentic as an original record. The cost of disk storage is much cheaper than physical storage costs, less maintenance and virtually no support costs. With most organisations having implemented a record keeping system, this is a viable option to most SAM teams.

There is a requirement for the SAM team to implement its own policy, processes and procedures for record keeping and these should be aligned to the corporate policy, processes and procedures. It is important to decide what records will be kept and what records will be discarded. If you keep every record then unless your records are very well managed the records themselves could become very unwieldy and to find the right record quite a task in itself. There has to be a balance in what to keep and what not to keep. Legal and regulatory records should always be kept for the period of time dictated by the legal and regulatory framework.

The format that the records should be kept should be based on commonly used formats that are not proprietary of a niche software product. These records will need to be accessed in future years and the mechanism to access them should be commonly available. Testing of restoration of records from backup should be undertaken periodically. Record disposal should be undertaken that meets the security requirements of the data classification of the record.

In conclusion, record keeping is a very important activity that the SAM team should be undertaking on a continuous basis. The SAM team need to develop its own policy, processes and procedures in how it manages its records, what records it will keep and discard, how it will test the discovery and restoration of records, and how it will securely dispose of records.

 

(IE Printing: - There are known IE printing problems that affect certain printer brands and printer types; Chrome and Firefox have no reported issues.)