8.3 Records Management, Document Management Systems & Disaster Recovery

8.3 Records Management, Document Management Systems & Disaster Recovery

Why this matters for PDE5: A recent case study presented disorganised tenant files — leases, inspection reports, correspondence, and maintenance records difficult to locate — and older paper files damaged by a water leak, with no disaster recovery plan for vital records. Candidates had to advise on records management steps. Principals are examined on this because the entire compliance chain (PPA, FICA, SARS, POPIA) is only as strong as the records that prove it.

---

1. Purpose of Records Management

Records management is the systematic control of records from their creation or receipt, through their use and maintenance, to their authorised disposal or archival preservation. Its main purpose is to preserve evidence of the enterprise's activities:

1. Accountability: mandates signed, disclosures delivered, inspections held, trust monies receipted — the record is the proof when a client, tribunal, or regulator asks.
2. Compliance: the PPA (Section 55), FICA (CDD and transaction records), the BCEA (employment records), and SARS (accounting records) each impose retention duties measured in years; unmanaged records are per-se non-compliance.
3. Continuity: the enterprise survives staff turnover, disputes, and disasters only if its institutional memory is filed, retrievable, and backed up.

Records management is emphatically not "removing all evidence" (an exam distractor): disposal happens only at the authorised end of the retention schedule, with destruction records kept.

---

2. The Record Life Cycle

Every record in the enterprise moves through a life cycle that determines where it lives and who may touch it:

---

3. Document Management Systems (DMS)

A document management system is the organised framework — physical, electronic, or hybrid — that makes the life cycle work. A compliant DMS must address four pillars:

1. Location: a defined home for every record class (transaction files per property, trust records per month, HR files per employee), so any document can be found in minutes, not hours.
2. Filing: standardised naming, indexing, and version control (e.g., PropertyAddress_DocType_Date_Version) applied by everyone, every time.
3. Retrieval: search and checkout discipline — who took the file, when it was returned; for electronic systems, metadata search with an audit log.
4. Security: role-based access (trust records restricted), physical locks for paper, encryption and access credentials for digital, and backup discipline with restoration testing.

For paper-heavy operations, commercial records centres offer secure off-site storage with retrieval services; for electronic records (Electronic Records Management), the system must preserve integrity and authenticity consistent with the ECT Act so that the record remains admissible evidence.

---

4. POPIA and Statutory Retention in the DMS

The DMS must encode the retention schedule, because statutory periods differ:

• PPA Section 55 — 5 years: all documents exchanged with the PPRA; agreements, mandates, and mandatory disclosure forms relating to financing, sale, purchase, or lease; and advertising/marketing material.
• FICA — 5 years: CDD identity records, transaction records, and reports, from the end of the relationship or transaction.
• Tax (SARS) — 5 years: accounting records and returns.
• POPIA overlay: personal information may not be kept longer than necessary for the lawful purpose unless a statute requires it — so the schedule must drive authorised destruction as much as retention, balancing FICA/PPA duties against POPIA minimality.

---

5. Vital Records & Disaster Recovery Planning

Vital records are the small subset without which the enterprise cannot function or prove its compliance: trust ledgers and bank mandates, current leases and mandates, insurance policies, FFC certificates, deeds and guarantees, and the corporate records (MOI, registers).

A disaster recovery plan (DRP) for vital records must specify:

1. Identification: a vital records register naming each vital record class and its location.
2. Protection: fire- and water-resistant storage for paper (a ground-floor storeroom that floods is not protection); encryption and access control for digital.
3. Redundancy: off-site or cloud backups of all electronic records, with paper vital records digitised; backups tested by actual restoration on a schedule.
4. Response procedures: who secures the site, salvages records, notifies insurers and (for personal-information breaches under POPIA Section 22) the Information Regulator and data subjects.
5. Recovery and review: reconstruction steps from backups, and a post-incident review that updates the plan.

Applied to the exam case: tenant files were disorganised (no location/filing standard), maintenance records unretrievable (no retrieval discipline), paper files destroyed by a water leak (no protective storage or digitisation), and there was no DRP at all. The remedy is exactly the chain above: register, DMS with the four pillars, retention schedule, and a tested disaster recovery plan — supervised at principal level because the duty of proving compliance never leaves the enterprise.