The regulations, which went into effect give clarification to the legal requirement that has been the law in California since 2000. Local agencies are not required by either the regulations or the law to maintain their official records electronically, but if they chose to do so they must be sure the system in which the information is stored is considered trusted under ARP1 (2009).
At its core, ARP1 (2009) requires a trusted ECM system to have the following components:
- A combination of hardware, media and software storage to prevent unauthorized alterations
- Verifiable through independent audit processes
- Write at least 1 of the 2 required copies to a safe and separate location
- Policies and procedures for proper records handling.
The Nexsan Assureon, addresses these 4 requirements and meets all the AIIM standards: