Skip to content

Information and communication technology retention schedule

Version 4, adopted September 2026, expires end September 2028. 


A PDF version of this retention schedule, including full version history, is held in the EDRM retention schedules folder.

See an explanation of the 6+ Rule and all other standard disposition codes.

ICT Services

ICT 01.01: Responding to ICT user enquiries, fault reports and requests for technical or applications support

Disposition: 6+

Example(s):

  • Service requests / call logs
  • Change management requests
  • Post incident review
  • Incident / service requests
  • Emails
  • System data / work logs

Rationale: Business need

Location: Halo

ICT 01.02: Documenting the arrangements for the acquisition of new ICT equipment

Disposition: 6+

Example(s):

  • Approved software list
  • Quotations
  • Orders
  • Invoices

Rationale: Business need

Location: SAP, Orderpoint, EDRM

ICT 01.03: The process for documenting the arrangements for the configuration and deployment of end user ICT equipment

Disposition: 6+

Example(s):

  • Specifications
  • Configuration documents

Rationale: Business need

ICT 01.04: Documenting the arrangements for the disposal, and the sanitisation of ICT equipment prior to disposal

Disposition: 6+

Example(s):

  • Disposal record
  • Asset register

Rationale: The Limitation Act 1980

Location: EDRM, Halo

ICT 01.05: Systems data held on ICT support systems for delivering end user ICT support

Disposition: 6+

Example(s):

  • Service catalogue
  • Systems centre
  • Halo
  • Change control documents

Rationale: Business need

Location: Proprietary system

ICT 01.06: Number not used

ICT 01.07: Providing ICT assistance and infrastructure as a traded service

Disposition: 6+

Example(s):

  • Correspondence
  • Draft orders / contracts

Rationale: The Limitation Act 1980

Location: EDRM, Shared network drives

ICT infrastructure management

ICT 02.01: Developing, maintaining and managing ICT infrastructure

Disposition: 6+

Example(s):

  • records of configuration, design and procedures

Rationale: Business need

Location: EDRM, Halo, Shared network drives

Information security management

ICT 06.01: The process for storing, monitoring and reporting on ICT information security

Disposition: 6+

Example(s):

  • Monthly monitoring reports for departments
  • Individual investigations requested by Audit Services
  • Spreadsheets of failed user accounts for each department
  • Audit trails in systems holding high volumes of restricted data
  • Results of tests

Rationale: Business need

Location: EDRM