The purpose of the IT Media Storage Procedure is to ensure data integrity and availability by establishing controls for storage, protection, access, procurement and destruction of your company’s data, media or software.

The IT Media Storage Procedure also helps plan for cost-effective storage technologies that offer long asset life and scalability. The IT storage procedure applies to all of your company’s data stored by the IT department, regardless of storage medium. (8 pages, 1422 words)

IT Media Storage Responsibilities:

Information Technology Managers are responsible for developing and reviewing the company’s data storage plan.

The Information Technology Storage Librarian is responsible for implementing the company data storage plan.

IT Media Storage Definitions:

Network-attached storage (NAS) – Hard disk storage set up with its own network address rather than being attached to the department computer serving applications to a network’s workstation users.

RAID – Redundant Array of Independent Disks is a method of storing the same data in different places (thus, redundantly) on multiple hard disks.

Storage-area network (SAN) – A high-speed, special-purpose network or subnetwork connecting different kinds of Information Technology storage devices with data servers on behalf of a large network of users.

Storage media – In computers, a storage medium is any technology (including devices and materials) used to place, keep, and retrieve data. The term “storage medium” usually refers to secondary storage, such as that on a hard disk or tape.

IT Media Storage Procedure Activities

IT Storage Planning
IT Storage Plan
IT Storage Plan Review
Updating the IT Storage Plan

IT Media Storage Procedure References

National Archives and Records Administration (NARA) Retention and Access Requirements for Records (36 CFR 1210.53)
IRS Procedure 98-25-Records Retention
Sarbanes-Oxley Act of 2002
Health Insurance Portability and Accountability Act of 1996 (HIPAA)
ISO Standard 17799:2005-Information Technology-Code of Practice for Information Security Management, Clause 12.1.3 (Safeguards of Organizational Records)