MoReq2010 Electronic Records Compliance Training Course

Course overview

Electronic records programmes often fail at the point where policy must become system behaviour. Retention rules are written but not configured, classification schemes do not match business activity, and suppliers make broad claims of compliance without traceable evidence. MoReq2010 provides a structured way to specify, procure, configure and test records systems so that records remain authentic, reliable, usable and managed for the required period. This course addresses the practical work of turning governance obligations into defensible electronic records requirements.

Participants work through the MoReq2010 modular requirements model, including the Core Services and Plug-in Modules, the role of the MoReq2010 XML schema, and the relationship between records controls, business classification, retention and disposition. They learn to develop a requirements profile, define record aggregation and metadata rules, specify access and audit controls, assess migration and export capabilities, and create testable supplier requirements. The course also examines how MoReq2010 can be applied alongside ISO 15489 and organisational information governance policies.

Delivery combines instructor-led explanation with hands-on requirements workshops, configuration scenarios and supplier-evaluation case studies. Participants analyse a fictional records environment, map its risks and processes, select relevant MoReq2010 modules, and build a practical compliance pack. They leave with a tailored MoReq2010 requirements profile, requirements traceability matrix, sample acceptance-test scripts and a prioritised implementation action plan that can be adapted for their own organisation.

The course is designed for records and information professionals, digital transformation teams, compliance staff and system owners who need a rigorous method for improving an existing electronic records management system or procuring a new one. It is equally relevant to professionals working with Microsoft Purview, OpenText, Alfresco or another enterprise content management platform.

Course objectives

By the end of this course, participants will be able to:

• Interpret the MoReq2010 modular requirements model, including Core Services and Plug-in Modules
• Build a MoReq2010 requirements profile aligned to a defined business records scenario
• Map business activities, record aggregations and classification structures to MoReq2010 requirements
• Specify metadata, capture, access-control and audit-trail requirements for electronic records
• Define retention, disposal hold, disposition review and destruction controls using MoReq2010 terminology
• Create a supplier evaluation matrix that traces product capabilities to selected MoReq2010 requirements
• Write acceptance-test scripts for capture, retrieval, export, audit and disposal functions
• Produce a phased MoReq2010 compliance action plan with priorities, owners and evidence requirements

Benefits of attending

Target competencies

Who should attend

• Records Managers — who must translate records policy into enforceable system requirements
• Information Governance Managers — who need evidence-based controls for retention, access and defensible disposal
• Electronic Document and Records Management System Administrators — who configure classifications, metadata and lifecycle rules
• Compliance and Risk Officers — who assess whether electronic records controls withstand audit and investigation
• Digital Transformation and Business Analysts — who gather requirements for content, records and workflow platforms
• Procurement and Vendor Management Specialists — who evaluate records-system bids against measurable functional requirements

Requirements and prerequisites

This is a foundation-to-intermediate course and does not require prior MoReq2010 training or certification. Participants should understand the difference between a document and a record, and have some familiarity with their organisation's retention schedule, file plan, information governance policy or electronic content platform. Experience of Microsoft Purview, OpenText, Alfresco or another records system is useful but not essential. A complete beginner can attend, but should expect to work with records-management terms such as metadata, classification, retention, disposition and audit trail from the first day. No coding, XML authoring or system-administration access is required.

Training methodology

The instructor uses short, structured briefings to explain each MoReq2010 component, followed by guided analysis of a realistic organisation moving records from shared drives into an electronic records environment. Participants work in small groups to select applicable modules, draft requirements, assess vendor responses and test system scenarios against a traceability matrix. Individual exercises focus on classification, metadata, retention and audit evidence. On the final day, each participant adapts the course templates to a live or planned workplace initiative and receives facilitator feedback on a practical implementation plan.

Course outline

Day 1: MoReq2010 foundations and records governance

• Purpose, scope and structure of the MoReq2010 specification
• Core Services, Plug-in Modules and optional requirement selection
• MoReq2010 terminology for records, aggregations, events and users
• Relationship between MoReq2010, ISO 15489 and organisational records policy
• Characteristics of authentic, reliable, integral and usable electronic records
• Business process analysis as the basis for records requirements
• Compliance risks created by unmanaged shared drives, email and collaboration spaces

Workshop: Participants assess a fictional organisation's records risks and produce an initial MoReq2010 module-selection rationale.

Day 2: Classification, capture and metadata controls

• Business classification schemes and records aggregation hierarchies
• Record capture requirements for documents, email and scanned content
• Mandatory, inherited and system-generated metadata elements
• MoReq2010 XML schema purpose and interoperability concepts
• Unique identifiers, titles, dates and contextual metadata controls
• Record declaration, version management and rendition handling
• Bulk capture, import validation and duplicate-record controls

Workshop: Participants create a classification and metadata profile for a procurement-records case, including capture rules and mandatory fields.

Day 3: Access, audit and lifecycle management

• Role-based access controls and records-security classifications
• Audit trail events, event metadata and evidential logging
• Retention scheduling and trigger-event design
• Disposal holds, legal holds and suspension of disposition
• Disposition review, authorisation and destruction documentation
• Transfer, export and preservation requirements for long-term records
• Managing records across collaborative workspaces and mobile access channels

Workshop: Participants design a retention-and-disposition control matrix with access roles, audit events and legal-hold scenarios.

Day 4: Procurement, configuration and compliance testing

• Turning MoReq2010 requirements into a request-for-proposal schedule
• Mandatory, desirable and locally defined requirement prioritisation
• Requirements traceability matrices for policy, system and test evidence
• Assessing supplier declarations of MoReq2010 support
• Configuration versus customisation decisions for records platforms
• Acceptance criteria for capture, search, audit, export and disposal
• Migration validation and records-integrity testing

Workshop: Participants score a mock supplier response and produce acceptance-test scripts for five high-risk records functions.

Day 5: Applying MoReq2010 in the organisation

• Gap analysis against current records processes and platform capabilities
• Prioritising remediation by risk, legal obligation and implementation effort
• Stakeholder roles for records owners, IT, legal, privacy and suppliers
• Governance checkpoints for configuration, change control and release management
• Evidence packs for internal audit, external audit and investigations
• Measures for capture quality, disposal completion and audit-log coverage
• Roadmap design for phased MoReq2010 adoption and continual assurance

Workshop: Participants assemble and present a MoReq2010 compliance pack containing a requirements profile, traceability matrix, test plan and 90-day action plan.

Tools & standards covered

MoReq2010, ISO 15489, Microsoft Purview Records Management, OpenText Content Management

A typical training day

Live online deliveries follow the same structure in the East Africa Time zone, with shorter screen blocks and longer breaks.

What the fee includes

How you can take this course

Certification

Participants who complete the full five days receive the Skillset Development Certificate of Completion, stating the course title, course code, dates and delivery format — suitable for professional-development records and employer reimbursement.

Frequently asked questions