NARA clarifies recordkeeping for the cloud

Agency issues FAQ for agency records officers on cloud computing

The National Archives and Records Administration (NARA) wants agencies to understand their records management responsibilities as they float computing services to the cloud.

NARA posted a document for agency records officers with answers to frequently asked questions related to managing federal records in cloud-computing environments. The FAQ, recently posted on NARA’s Web site, includes definitions, benefits, concerns and records management implications associated with the technology.

Paul Wester, director of modern records programs at NARA, said the FAQ was designed to inform agency records managers about cloud computing technology and to set the stage for an upcoming bulletin on the subject. NARA plans to release the bulletin that will provide more in-depth information related to cloud computing and federal recordkeeping by the end of fiscal 2010.

Cloud computing is a priority for NARA because of the unique nature of the technology and the shift it represents for agencies, Wester said. Agencies that use the technology don’t have direct, physical control over servers where cloud applications, storage, and, possibly, records may reside, he added.


Related Story:

Cloud-computing success depends on knowing what to ask


“As cloud-computing technologies continue to evolve and be deployed in the federal government, NARA wants to ensure that agencies have guidance about the records management implications present in these environments,” Wester said.

NARA said records management implications of cloud computing include:

  • Many applications don’t have record functions, so models may not meet all federal records management requirements
  • Some cloud architectures don't have formal technical standards governing how data is stored and manipulated in cloud environments
  • A lack of portability standards may make it hard to remove records for recordkeeping requirements and
  • Vendors’ terms of services may not sufficiently deal with NARA’s requirements for Electronic Information Systems procurement contracts.

The document said some vendors are beginning to produce records management applications for use with cloud computing services, and those may ease some of those problems. Agencies are responsible for complying with records management regulations regardless of where records are stored, the FAQ added.

About the Author

Ben Bain is a reporter for Federal Computer Week.

Featured

  • Defense
    Ryan D. McCarthy being sworn in as Army Secretary Oct. 10, 2019. (Photo credit: Sgt. Dana Clarke/U.S. Army)

    Army wants to spend nearly $1B on cloud, data by 2025

    Army Secretary Ryan McCarthy said lack of funding or a potential delay in the JEDI cloud bid "strikes to the heart of our concern."

  • Congress
    Rep. Jim Langevin (D-R.I.) at the Hack the Capitol conference Sept. 20, 2018

    Jim Langevin's view from the Hill

    As chairman of of the Intelligence and Emerging Threats and Capabilities subcommittee of the House Armed Services Committe and a member of the House Homeland Security Committee, Rhode Island Democrat Jim Langevin is one of the most influential voices on cybersecurity in Congress.

Stay Connected

FCW INSIDER

Sign up for our newsletter.

I agree to this site's Privacy Policy.