Relying on the Securities and Exchange Commission (SEC) for guidance on regulations turns out to be a pretty bad idea, as we are finding out in more ways than one these days. When it comes to figuring out what constitutes compliance-based storage, the legislation is long in the tooth but the principles are clear. There are thousands of words written about the details, but from a technology point of view, compliance comes down to "expert opinion." There are several consultancy firms that are recommended by the storage vendors to demonstrate that a technology guarantees data immutability and auditing. But there is still a lot of confusion and very few tangible rules to follow. Buried in the myths and legends of what is and is not compliant storage are some generally accepted wisdoms.
TABLE OF CONTENTS
1. Do vendors accept indemnification for product failures that result in non-compliance?
2. Do companies keep copies of records on paper, optical storage, or WORM storage?
3. How has the SEC reacted to WORM technologies? Are trends showing SEC acceptance?
4. Is data considered "original" if it was de-duplicated, compressed, or transformed?
5. Who are the traditional and emerging players in compliance storage?
This is an excerpt
Buy Risk-Free
Price: US $499
Our Service Guarantee: If you are not completely satisfied with this document, notify Forrester within 24 hours of purchase for a full refund.
Already a Forrester Client? Log in to read this document.