Skip to content

Information and communication technology retention schedule

Version 3.2, adopted September 2024, expires end September 2026. 


A PDF version of this retention schedule, including full version history, is held in the EDRM retention schedules folder.

See an explanation of the 6+ Rule and all other standard disposition codes.

ICT Services

ICT 01.01: Responding to ICT user enquiries, fault reports and requests for technical or applications support

Disposition: 6+

Example(s):

  • Service requests / call logs
  • Change management requests
  • Post incident review
  • Incident / service requests
  • Emails
  • System data / work logs

Rationale: Business need

Location: Halo

ICT 01.02: Documenting the arrangements for the acquisition of new ICT equipment

Disposition: 6+

Example(s):

  • Approved software list
  • Quotations
  • Orders
  • Invoices

Rationale: Business need

Location: SAP, Orderpoint, EDRM

ICT 01.03: The process for documenting the arrangements for the configuration and deployment of end user ICT equipment

Disposition: 6+

Example(s):

  • Specifications
  • Configuration documents

Rationale: Business need

ICT 01.04: Documenting the arrangements for the disposal, and the sanitisation of ICT equipment prior to disposal

Disposition: 6+

Example(s):

  • Disposal record
  • Asset register

Rationale: The Limitation Act 1980

Location: EDRM, Halo

ICT 01.05: Systems data held on ICT support systems for delivering end user ICT support

Disposition: 6+

Example(s):

  • Service catalogue
  • Systems centre
  • Halo
  • Change control documents

Rationale: Business need

Location: Proprietary system

ICT 01.06: Number not used

ICT 01.07: Providing ICT assistance and infrastructure as a traded service

Disposition: 6+

Example(s):

  • Correspondence
  • Draft orders / contracts

Rationale: The Limitation Act 1980

Location: EDRM, Shared network drives

Network management

ICT 02.01: Developing, maintaining and managing ICT networks

Disposition: 6+

Example(s):

  • Network equipment information
  • Configuration information
  • Configuration backups
  • Network diagrams
  • Cabinet information
  • Work packages
  • Change control documents
  • Maintenance records

Rationale: Business need

Location: EDRM, Halo, Shared network drives

ICT 02.02: Number not used

ICT 02.03: Number not used

ICT 02.04: Documenting the routine monitoring and testing of the operation of ICT systems, and action taken to rectify problems and optimise performance

Disposition: 6+

Example(s):

  • Orion monitoring reports
  • Testing procedures / guidelines;
  • Post incident reviews

Rationale: Business need

Location: EDRM, Shared network drives

Software support

ICT 03.01: Managing the high level development and support of software (for example change management, system development, upgrades etc)

Disposition CASE+6 (closure point: software withdrawn from use)

Example(s):

  • User manuals
  • Communications with users
  • Training materials and schedules
  • Business / process flows
  • Problem records

Rationale: Business need

Location: EDRM

Server support and management

ICT 04.01: Documenting the opening, maintenance and closure of user accounts for ICT systems

Disposition: 6+

Example(s):

  • Service requests

Rationale: Business need

Location: Halo

ICT 04.02: Documenting the routine monitoring and testing of the operation of ICT systems, and action taken to rectify problems and optimise performance

Disposition: 6+

Example(s):

  • Post-incident reviews
  • Problem records
  • Change management records

Rationale: Business need

Location: Halo

ICT 04.03: Maintenance and development of ICT servers

Disposition: 6+

Example(s):

  • Change requests

Rationale: Business need

Location: Halo

ICT 04.04: Number not used

ICT 04.05: Documenting the management of system data storage

Disposition: 6+

Example(s):

  • Change requests

Rationale: Business need

Location: Halo

ICT projects and development

ICT 05.01: Number not used

Formerly: documenting the management of ICT systems development projects. See MAR 03.07.

Information security management

ICT 06.01: The process for storing, monitoring and reporting on ICT information security

Disposition: 6+

Example(s):

  • Monthly monitoring reports for departments
  • Individual investigations requested by Audit Services
  • Spreadsheets of failed user accounts for each department
  • Audit trails in systems holding high volumes of restricted data
  • Results of tests

Rationale: Business need

Location: EDRM