Document and Records Management Training Course

Duration 10 days 18 modules · 65 contact hours
Level Intermediate Certificate on completion
Who attends Records Managers, SharePoint Administrators and others
Fee from USD 2,200 KSh 190,000 for Kenyan organisations
Where 52 cities + online See dates by city
Next start 9 Nov 2026 Course code SD-KRM-023

Before you join: Participants should understand common office documents, shared folders and basic business processes such as approvals, contracts, cases or projects.

Dates & prices

Two start dates a month in every city, and live online on weekdays or weekends. Fees are per participant; classroom fees include tuition, materials, lunch and refreshments, and the certificate.

Suggest a date or city

Showing the next six months. Later dates, other cities and private deliveries for your team are available on request.

Course overview

Poorly controlled documents create version confusion, slow approvals, duplicate storage, weak audit trails and avoidable legal exposure. Records management failures can also leave organisations unable to demonstrate how decisions were made, which policy applied or whether retention duties were met. These issues are common where teams use SharePoint Online as a file store rather than as a managed information service.

This course develops the practical skills required to design, configure and govern document and records management arrangements in SharePoint Online. Participants examine information architecture, metadata, content types, document libraries, version control, approval workflows, retention labels, sensitivity labels, audit evidence and disposition controls. The course uses ISO 15489 principles and Microsoft 365 capabilities to connect business requirements with workable SharePoint configurations.

Participants build a records management design for a realistic business case, such as a public procurement unit, regulated bank function, NGO programme office or corporate legal department. They produce an information architecture, metadata model, content type design, permissions approach, retention schedule mapping and implementation plan. Instructor-led briefings are combined with case analysis, configuration simulations, peer reviews and structured application planning. Participants receive a certificate of completion after attending the full ten-day programme.

The course suits professionals responsible for information governance, SharePoint administration, compliance, business operations and digital workplace services. It is particularly valuable for teams preparing a SharePoint migration, replacing shared drives, introducing retention controls or responding to audit findings.

What you will be able to do

  • Design a SharePoint Online information architecture using sites, libraries, content types and metadata
  • Classify business records using ISO 15489 concepts, records classes and retention requirements
  • Configure document libraries with versioning, check-out, approval settings and controlled templates
  • Develop a metadata schema and managed term set for consistent document retrieval
  • Map retention schedules to Microsoft Purview retention labels and disposition review processes
  • Apply permissions, sensitivity labels and access controls to protect business information
  • Assess document and records management risks using audit evidence, control testing and gap analysis
  • Produce and present a SharePoint Online document and records management implementation design

Benefits of attending

For you

  • Build confidence designing SharePoint libraries beyond simple folder structures
  • Create defensible retention mappings from business records schedules
  • Recognise configuration choices that weaken audit trails or access control
  • Translate records policies into practical metadata, labels and workflow requirements
  • Present a credible document management design to technology and compliance stakeholders

For your organisation

  • Reduce time spent locating approved documents and authoritative records
  • Improve evidence quality for audits, investigations and regulatory requests
  • Apply consistent retention and disposition controls to Microsoft 365 content
  • Reduce duplicate files, uncontrolled sharing and unmanaged shared-drive migration
  • Establish clearer ownership for information classification, access and lifecycle decisions

Course modules

18 modules over 10 days

Participants can distinguish documents, records and controlled information throughout their lifecycle.

  • Document, record and information asset definitions under ISO 15489
  • Business value, evidential value and operational value of records
  • Records lifecycle stages from creation through authorised disposition
  • Authoritative source principles for controlled business information
  • Fixed, dynamic and transitory records classification decisions
  • Consequences of unmanaged versions, duplicates and undocumented decisions

Participants can define governance roles and policy controls for SharePoint records services.

  • RACI matrix for business owners, records managers and administrators
  • Policy hierarchy linking information governance, retention and security requirements
  • Accountability model for site ownership and periodic access reviews
  • Escalation routes for legal holds, investigations and policy exceptions
  • Control objectives translated into measurable SharePoint operating procedures
  • Governance forums, decision logs and change-control responsibilities

Participants can elicit document and records requirements from business processes.

  • Process mapping identifies document creation, approval and retention triggers
  • Stakeholder interviews capture retrieval, access and evidence requirements
  • Records inventory fields document volume, owner, format and risk
  • Use cases distinguish collaboration needs from formal recordkeeping needs
  • Requirements traceability matrix links controls to business scenarios
  • Prioritisation criteria balance regulatory exposure, user demand and implementation effort

Participants can structure SharePoint sites and libraries around business information needs.

  • Hub sites organise related sites under common navigation
  • Site purpose determines team, communication or records repository design
  • Document libraries separate controlled content from active collaboration material
  • Folder design follows limited-depth principles and stable business functions
  • Library views expose relevant metadata without duplicating stored files
  • Naming conventions support predictable URLs, titles and migration mapping

Participants can create a metadata model that supports classification, retrieval and retention.

  • Metadata schema distinguishes descriptive, administrative and records management fields
  • Content types combine document templates, columns and retention requirements
  • Managed metadata service controls enterprise terms and synonyms
  • Term sets establish approved values for functions, cases and subjects
  • Required metadata rules prevent incomplete classification at document creation
  • Search refiners use indexed columns and consistent managed properties

Participants can standardise controlled documents using content types, templates and identifiers.

  • Content type inheritance applies common controls across related libraries
  • Document templates embed approved headings, classifications and review fields
  • Document IDs provide persistent references for controlled information
  • Major and minor versions distinguish drafts from published documents
  • Check-out settings prevent conflicting edits to controlled documents
  • Approval status controls publication of policies, procedures and manuals

Participants can design role-based access controls for SharePoint information services.

  • SharePoint permission levels align with defined business access roles
  • Inheritance decisions limit unnecessary unique permissions within libraries
  • Microsoft 365 groups manage membership for collaborative workspaces
  • Least-privilege analysis identifies excessive edit and download rights
  • External sharing controls protect supplier, partner and client information
  • Access review schedules confirm continuing business need for permissions

Participants can improve retrieval through metadata, views, search and naming standards.

  • Search query construction combines keywords, filters and managed properties
  • Metadata-driven views support role-specific retrieval without duplicate libraries
  • Naming standards improve recognisability without replacing formal metadata
  • Document sets group related records within a controlled business case
  • Search result testing identifies missing metadata and indexing defects
  • Retrieval performance measures include precision, recall and search time

Participants can build a functional file plan linked to business activities and records classes.

  • Functional classification groups records by business activity and purpose
  • File plan structure assigns records classes, owners and retention rules
  • Classification schemes separate corporate, case and project record series
  • Business classification codes support consistent filing and migration mapping
  • Crosswalk tables map legacy folders to approved records classes
  • Classification governance manages additions, closures and changed business functions

Participants can map retention obligations to defensible disposition controls in Microsoft 365.

  • Retention schedule fields capture trigger, period, authority and disposition action
  • Event-based retention starts from closure, expiry or final approval
  • Microsoft Purview retention labels apply lifecycle rules to classified content
  • Retention label policies publish approved labels to selected locations
  • Disposition review assigns accountable reviewers before permanent deletion
  • Destruction certificates document authorised disposal decisions and exceptions

Participants can apply security classifications and protection controls to sensitive content.

  • Information classification model distinguishes public, internal, confidential and restricted content
  • Microsoft Purview sensitivity labels apply encryption, markings and access restrictions
  • Data loss prevention policies identify prohibited sharing of sensitive data
  • Sensitive information types detect identifiers, financial data and personal information
  • Label publishing follows role, location and business-use requirements
  • Protection impact assessments balance confidentiality, usability and operational access

Participants can preserve relevant records and produce evidence for investigations or disputes.

  • Legal hold procedures suspend normal deletion and disposition actions
  • Microsoft Purview eDiscovery cases organise custodians, sources and review sets
  • Audit log searches identify sharing, deletion and permission changes
  • Chain-of-custody records preserve evidence handling and review decisions
  • Investigation scoping defines relevant dates, custodians and information sources
  • Privilege and confidentiality controls govern sensitive legal review material

Participants can specify controlled document workflows using SharePoint and Power Automate.

  • Power Automate approval flows route documents to accountable reviewers
  • Workflow states define draft, review, approved, superseded and archived
  • Service-level targets set expected review and approval turnaround times
  • Escalation rules notify owners of overdue reviews and approvals
  • Approval evidence captures approver, decision, date and comments
  • Exception handling documents rejected submissions and alternative approval routes

Participants can plan controlled migration from shared drives and legacy repositories.

  • Migration inventory identifies duplicate, obsolete and high-risk content
  • ROT analysis separates redundant, obsolete and trivial information
  • Mapping rules assign source folders to target sites and metadata
  • Pre-migration cleansing removes unmanaged duplicates and expired records
  • Migration validation checks file counts, metadata and permissions
  • Post-migration acceptance criteria confirm retrieval, access and retention behaviour

Participants can monitor records controls and improve SharePoint services using assurance evidence.

  • Control testing samples records against classification and retention requirements
  • Key performance indicators measure search success, compliance and review completion
  • Audit trails provide evidence of access, sharing and configuration changes
  • Maturity assessment compares current controls against target operating practices
  • Root cause analysis investigates repeated filing and retention failures
  • Corrective action plans assign owners, dates and verification measures

Participants can plan adoption activities and sustained operational support for records controls.

  • Change impact assessment identifies affected roles, processes and behaviours
  • Role-based guidance explains filing, sharing, review and disposition responsibilities
  • Champions networks provide local support and feedback channels
  • Standard operating procedures document recurring administration and quality checks
  • Communications plans sequence launch messages, guidance and reinforcement
  • Adoption metrics track active usage, metadata completion and policy exceptions

Participants can create a phased implementation plan with accountable controls and measurable milestones.

  • Implementation roadmap sequences discovery, configuration, migration and rollout activities
  • Risk register records threats, likelihood, impact, owners and treatments
  • Control design specifies objective, activity, evidence, frequency and owner
  • Pilot criteria select representative content, users and compliance requirements
  • Release management controls configuration changes between test and production
  • Benefits measures establish baselines for retrieval, compliance and storage reduction

Participants can build, review and present a complete SharePoint Online document and records management design.

  • Business scenario defines records scope, stakeholders, risks and success criteria
  • Information architecture specifies sites, libraries, content types and navigation
  • Metadata model defines columns, term sets, required fields and views
  • File plan maps records classes to retention labels and disposition actions
  • Permissions matrix assigns access roles, review cycles and external sharing rules
  • Implementation roadmap defines phases, controls, dependencies and accountable owners

Exercises and examples are adapted to each cohort's sectors and roles.

What you take back to work

  1. SharePoint Online information architecture blueprint
  2. Metadata schema and managed taxonomy template
  3. Records classification file plan
  4. Retention schedule to Purview label mapping
  5. Permissions and access review matrix
  6. Document and records management implementation roadmap

Who should attend

  • Records Managers — responsible for retention, classification and defensible disposition controls
  • SharePoint Administrators — configure libraries, permissions, metadata and lifecycle settings
  • Information Governance Managers — establish ownership, policies and assurance arrangements
  • Compliance Officers — test records controls against regulatory and audit requirements
  • Business Analysts — translate operational document needs into SharePoint requirements
  • Digital Workplace Managers — standardise collaboration spaces and controlled information services

Skills and tools covered

SharePoint information architectureRecords classificationMetadata designRetention managementInformation governanceCompliance control testing

Tools and standards

ISO 15489, Microsoft SharePoint Online, Microsoft Purview, Power Automate

How the course runs

Training methodology

The programme combines short instructor briefings with guided analysis of realistic SharePoint Online cases. Participants review document lifecycles, classify records, design metadata, interpret retention requirements and make configuration decisions using sample libraries and Microsoft 365 scenarios. Group exercises test competing requirements from operations, legal, compliance and information technology teams. Simulations cover search, approval, access control, retention and disposition decisions. Each participant progressively applies the methods to a work-relevant case, receiving structured peer and instructor feedback before the final presentation.

Requirements and prerequisites

Participants should understand common office documents, shared folders and basic business processes such as approvals, contracts, cases or projects. Familiarity with Microsoft 365 and SharePoint Online document libraries is useful, including uploading files, sharing links and using views. The course assumes participants can discuss their organisation's document types, ownership roles and retention concerns. Prior SharePoint administration, Microsoft Purview configuration, coding, database design or formal records management certification is not required. Technical settings are explained in business and governance terms before configuration choices are made.

A typical training day

08:30 – 10:30First session
10:30 – 10:45Refreshment break
10:45 – 12:30Second session
12:30 – 13:30Lunch and networking
13:30 – 15:00Third session
15:00 – 15:15Refreshment break
15:15 – 16:30Workshop and daily review

Live online deliveries follow the same structure in East Africa Time, with shorter screen blocks and longer breaks.

What the fee includes

  • Instruction by a practitioner facilitator
  • Full course workbook and materials
  • Exercise files, templates and case studies
  • Refreshments and lunch on classroom deliveries
  • Certificate of completion
  • Post-course application plan

Frequently asked questions

You should be comfortable using office documents and understand how your team stores and shares files. Basic SharePoint Online familiarity is useful, but prior administration experience or records management certification is not required.

Bring examples of document types, filing problems, retention concerns or audit findings from your work where permitted. A laptop is useful for live online delivery and may be requested for classroom sessions using configuration simulations.

The course is designed for records managers, SharePoint administrators, information governance staff, compliance professionals, business analysts and digital workplace teams. It also suits managers sponsoring a shared-drive replacement or Microsoft 365 records programme.

General user training focuses on creating sites, uploading files and collaborating with colleagues. This course focuses on controlled information services: classification, metadata, permissions, retention, disposition, audit evidence and governance.

Participants develop a work-relevant design including an information architecture, metadata model, retention mapping and implementation roadmap. These materials can be adapted for a library redesign, migration project, policy refresh or compliance review.

Training runs from 08:30 to 16:30 each day, providing about 6.5 contact hours daily. The first week establishes core design methods and SharePoint controls, while the second week addresses retention, assurance, implementation and the final capstone presentation.

Questions about this course?

Ask about dates, fees, group bookings or running it for your team. Our training team replies by email.