The Business Controls Caddy

Permalink E-mail/IM Archiving a Must For Government Contractors




In a conversation with a customer the other day, he mentioned that companies that have contracts with the United States Government must archive and keep all e-mail, instant messages, and faxes to be in compliance with the Federal Acquisition regulations (FAR). For those of you that have never worked with the FAR before, it is a monstrous document. It is so big in fact, that the entry level training class for government contract specialists is a 4 week ordeal where you go through much of the document, but still only scratch the surface. And not only do you have the FAR, you have department and agency supplements. For example, if you work for a military command such as the Naval Air Systems Command (NAVAIR) like I did in the late 1980's, you had the FAR, the DFAR (for the Department of Defense), the NAVSUP (for the navy) and NAVAIR directives. It can be quite a maze.

The implications for this could be staggering, especially for smaller companies who have no archiving systems in place or, worse yet, rely on public email/Instant messagingM networks such as AOL, Yahoo, Hotmail, GMail, etc.. Not only does it mean having a method to archive and retain these documenmts, but the addition of integrated fax capability.

So the other night, I decided to traverse the FAR to find the documentation, and while I am sure I still have much more to read on the topic, this is what I came up with.
Subpart 4.7—Contractor Records Retention
 
4.700  Scope of subpart.

This subpart provides policies and procedures for retention of records by contractors to meet the records review requirements of the Government. In this subpart, the terms “contracts” and “contractors” include “subcontracts” and “subcontractors.”

4.701  Purpose.

The purpose of this subpart is to generally describe records retention requirements and to allow reductions in the retention period for specific classes of records under prescribed circumstances.

4.702  Applicability.

(a) This subpart applies to records generated under contracts that contain one of the following clauses:

(1) Audit and Records—Sealed Bidding (52.214-26).

(2) Audit and Records—Negotiation (52.215-2).

(b) This subpart is not mandatory on Department of Energy contracts for which the Comptroller General allows alternative records retention periods. Apart from this exception, this subpart applies to record retention periods under contracts that are subject to Chapter 137, Title 10, U.S.C., or 40 U.S.C. 101, et seq.

4.703  Policy.

(a) Except as stated in 4.703(b), contractors shall make available records, which includes books, documents, accounting procedures and practices, and other data, regardless of type and regardless of whether such items are in written form, in the form of computer data, or in any other form, and other supporting evidence to satisfy contract negotiation, administration, and audit requirements of the contracting agencies and the Comptroller General for—

(1) 3 years after final payment or, for certain records;

(2) The period specified in 4.705 through 4.705-3, whichever of these periods expires first.

(b) Contractors shall make available the foregoing records and supporting evidence for a longer period of time than is required in 4.703(a) if—

(1) A retention period longer than that cited in 4.703(a) is specified in any contract clause; or

(2) The contractor, for its own purposes, retains the foregoing records and supporting evidence for a longer period. Under this circumstance, the retention period shall be the period of the contractor’s retention or 3 years after final payment, whichever period expires first.

(3) The contractor does not meet the original due date for submission of final indirect cost rate proposals specified in paragraph (d)(2) of the clause at 52.216-7, Allowable Cost and Payment, and paragraph (c)(2) of the clause at 52.216-13, Allowable Cost and Payment—Facilities. Under these circumstances, the retention periods in 4.705 shall be automatically extended one day for each day the proposal is not submitted after the original due date.

(c) Nothing in this section shall be construed to preclude a contractor from duplicating or storing original records in electronic form unless they contain significant information not shown on the record copy. Original records need not be maintained or produced in an audit if the contractor or subcontractor provides photographic or electronic images of the original records and meets the following requirements:

(1) The contractor or subcontractor has established procedures to ensure that the imaging process preserves accurate images of the original records, including signatures and other written or graphic images, and that the imaging process is reliable and secure so as to maintain the integrity of the records.

(2) The contractor or subcontractor maintains an effective indexing system to permit timely and convenient access to the imaged records.

(3) The contractor or subcontractor retains the original records for a minimum of one year after imaging to permit periodic validation of the imaging systems.

(d) If the information described in paragraph (a) of this section is maintained on a computer, contractors shall retain the computer data on a reliable medium for the time periods prescribed. Contractors may transfer computer data in machine readable form from one reliable computer medium to another. Contractors’ computer data retention and transfer procedures shall maintain the integrity, reliability, and security of the original computer data. Contractors shall also retain an audit trail describing the data transfer. For the record retention time periods prescribed, contractors shall not destroy, discard, delete, or write over such computer data.

4.704  Calculation of retention periods.

(a) The retention periods in 4.705 are calculated from the end of the contractor’s fiscal year in which an entry is made charging or allocating a cost to a Government contract or subcontract. If a specific record contains a series of entries, the retention period is calculated from the end of the contractor’s fiscal year in which the final entry is made. The contractor should cut off the records in annual blocks and retain them for block disposal under the prescribed retention periods.

(b) When records generated during a prior contract are relied upon by a contractor for cost or pricing data in negotiating a succeeding contract, the prescribed periods shall run from the date of the succeeding contract.

(c) If two or more of the record categories described in 4.705 are interfiled and screening for disposal is not practical, the contractor shall retain the entire record series for the longest period prescribed for any category of records.

4.705  Specific retention periods.

The contractor shall retain the records identified in 4.705-1 through 4.705-3 for the periods designated, provided retention is required under 4.702. Records are identified in this subpart in terms of their purpose or use and not by specific name or form number. Although the descriptive identifications may not conform to normal contractor usage or filing practices, these identifications apply to all contractor records that come within the description.

4.705-1  Financial and cost accounting records.

(a) Accounts receivable invoices, adjustments to the accounts, invoice registers, carrier freight bills, shipping orders, and other documents which detail the material or services billed on the related invoices: Retain 4 years.

(b) Material, work order, or service order files, consisting of purchase requisitions or purchase orders for material or services, or orders for transfer of material or supplies: Retain 4 years.

(c) Cash advance recapitulations, prepared as posting entries to accounts receivable ledgers for amounts of expense vouchers prepared for employees’ travel and related expenses: Retain 4 years.

(d) Paid, canceled, and voided checks, other than those issued for the payment of salary and wages: Retain 4 years.

(e) Accounts payable records to support disbursements of funds for materials, equipment, supplies, and services, containing originals or copies of the following and related documents: remittance advices and statements, vendors’ invoices, invoice audits and distribution slips, receiving and inspection reports or comparable certifications of receipt and inspection of material or services, and debit and credit memoranda: Retain 4 years.

(f) Labor cost distribution cards or equivalent documents: Retain 2 years.

(g) Petty cash records showing description of expenditures, to whom paid, name of person authorizing payment, and date, including copies of vouchers and other supporting documents: Retain 2 years.

4.705-2  Pay administration records.

(a) Payroll sheets, registers, or their equivalent, of salaries and wages paid to individual employees for each payroll period; change slips; and tax withholding statements: Retain 4 years.

(b) Clock cards or other time and attendance cards: Retain 2 years.

(c) Paid checks, receipts for wages paid in cash, or other evidence of payments for services rendered by employees: Retain 2 years.

4.705-3  Acquisition and supply records.

(a) Store requisitions for materials, supplies, equipment, and services: Retain 2 years.

(b) Work orders for maintenance and other services: Retain 4 years.

(c) Equipment records, consisting of equipment usage and status reports and equipment repair orders: Retain 4 years.

(d) Expendable property records, reflecting accountability for the receipt and use of material in the performance of a contract: Retain 4 years.

(e) Receiving and inspection report records, consisting of reports reflecting receipt and inspection of supplies, equipment, and materials: Retain 4 years.

(f) Purchase order files for supplies, equipment, material, or services used in the performance of a contract; supporting documentation and backup files including, but not limited to, invoices, and memoranda; e.g., memoranda of negotiations showing the principal elements of subcontract price negotiations (see 52.244-2): Retain 4 years.

(g) Production records of quality control, reliability, and inspection: Retain 4 years.

If I come up with more, I will be sure to post it. If anyone else has experiences they can share in this area, please feel free to chime in.



Comments
12/14/2006 12:37:53 PM

Comment posted by Nathan T. Freeman12/14/2006 12:31:11 PM
Homepage: http://www.openntf.org/nathan/escape.nsf


I hope you can forgive me for not reading this in its entirety.

But wouldn't this mean that MS can't bid on federal projects unless they change their 30-day retention policy? It is Bill Gates' assistant's specific job to destroy all permanent record of his work product, y'know.


Add Your Comments



Email addresses provided are not made available on this site.





You can use UUB Code in your posts.

[b]bold[/b]  [i]italic[/i]  [u]underline[/u]  [s]strikethrough[/s]

URL's will be automatically converted to Links


:angry: :-( :-p :lips: :laugh: :-o :rolleyes: :huh: :-D :grin: :cool: :cry: :-) :-\ ;-) :-x :emb:






Remember me    

Add Manual Trackback
Please enter the details of the trackback post. Your trackback will not appear on the site until it has been verified. This may take up to 10 minutes.

Site Name

Permanent URL of TrackBack Post

Title of Post ( If Any )

Excerpt of Post ( Max 250 Chars )



Search
Google
Sponsored Ads
My Other Blog

Fighting Fud

Fear, Uncertainty and Doubt (FUD) are too often used as marketing tools. And too many mainstream publications are citing reports that have no validity. So if you know anybody who is citing these publications and reports to make business decisions, please point them to one or more of these links. You can also point them to the "Fighting FUD" index of stories and/or add the "Fighting FUD" graphic link to your web site.



flag icon graphic Microsoft Tries To Feed Up More FUD, Again

flag icon graphic Lies, Damn Lies, and Radica...oops I Mean Statistics

flag icon graphic On Forbes, Foolishness and FUD

flag icon graphic When Technical Magazines Fuel FUD


Fighting FUD Blogroll
Tom "Duffbert" Duff
Chris Linfoot
Matt White
Joe Litton
Jeff Crossett
Gerco Wolfswinkel
Chris Whisonant
Gregg Eldred
Richard Schwatrz

Leaderboard By Category

About Me
About the Blog
Accounting Software
Admin2005
Articles
Auditing Standards
Best Practices
Best Practices - Coding
Blogging Risks
Blogging Templates
Blogsphere
Book Downloads
Book Reviews
Bookstore
Business Continuity
Business Continuity/Disa...
Business Controls
Business Controls Humor
Business Process Re-Engi...
Caddyshack
Case Studies
Collaboration Tools
College Football
College Hoops
Commentary
Community News
Compliance
Compliance Tools
Compliance Tools - Lotus...
Conference Presentations
Control Frameworks
Control Self Assessment ...
Copyright, Fair Use and ...
Corporate Governance
Data Protection
Daylight Savings Time
Dimensions of Leadership
Disaster Recovery
E-Commerce
E-Mail Compliance
E-Mail Etiquette
Employee Policies
Ethics
Exposure Drafts
Eye on Sports Media
Fighting FUD
Fraud Prevention
General
Going Green
Golf
Governance Cup
Government Compliance
HIPAA
Humour/Satire
IBM Pensions
IM Controls
Internet Safety
Interviews
Ireland 2007
IS Governance
IS Governance At Home
IT Audit Tools
IT Governance
IT Governance Insight
ITIL
Just for Fun
Licensing
Live Blogging Tools
Lotus AdvisorLive
Lotus Notes 8
Lotus Quickr
Lotusphere 2005
Lotusphere 2006
Lotusphere 2007
Lotusphere 2008
Lotusphere 2009
Movie Reviews
News Links
Newspaper Columns
Niagara Basketball
None
Notes 8 Beta
Notes/Domino Administrat...
Notes/Domino Development
Notes/Domino Mail
Notes/Domino Security
Observations
Outsourcing
Patent Issues
Presentations
Press Releases
Privacy
Procurement Controls
Product Advocacy
Records Retention
Reflections
Risk Assessment
Sarbanes-Oxley
Sarbanes-Oxley Tools
Secure Messaging
Security Awareness
Security Controls
Site Update
Smoking Kills
Social Engineering
Social Software
Social Software Risks
Software Development Con...
Software Tools
Spreadsheet Controls
Telecommuting Risks
The Disposable Society
Training Series
Travel Tips/Observations
Trivia
TV/Radio Sports
Understanding COBIT
User Education
User Interface
Vocabulary
Way Off Topic
WebSphere
XBRL
XML Feeds