Records Retention and Archiving Training Course

Duration 10 days 19 modules · 65 contact hours
Level Intermediate Certificate on completion
Who attends Records Managers, Information Governance Managers and others
Fee from USD 2,200 KSh 190,000 for Kenyan organisations
Where 52 cities + online See dates by city
Next start 16 Nov 2026 Course code SD-KRM-034

Before you join: Participants should have practical exposure to business records, document repositories, compliance processes, archives, legal operations or administrative controls.

Dates & prices

Two start dates a month in every city, and live online on weekdays or weekends. Fees are per participant; classroom fees include tuition, materials, lunch and refreshments, and the certificate.

Suggest a date or city

Showing the next six months. Later dates, other cities and private deliveries for your team are available on request.

Course overview

Poorly controlled records create legal exposure, undermine investigations, increase storage costs and make reliable evidence difficult to find. Organisations must retain records long enough to meet operational, regulatory and contractual duties, then dispose of them defensibly. This requires more than a retention schedule: it requires classification rules, ownership, metadata, secure repositories, disposal controls and auditable decision-making.

This course equips participants to design, improve and operate records retention and archiving arrangements. Participants examine the records lifecycle, ISO 15489 principles, retention-rule research, records classification, metadata, legal holds, secure destruction, transfer to archives and digital preservation. They learn how to distinguish records from non-records, apply retention triggers, establish ownership, assess repository controls and test whether disposal decisions can withstand audit, litigation or regulatory scrutiny.

Instruction combines focused briefings with records scenarios drawn from banking, public administration, health services, infrastructure, NGOs and multinational operations. Participants work with sample policies, retention schedules, file plans, legal-hold notices, disposition logs and audit findings. Throughout the course, they build a practical records retention and archiving package for a realistic business function or their own workplace, including a classification structure, retention rules, governance controls and implementation plan.

The course suits professionals responsible for records, information governance, compliance, legal operations, archives, digital transformation and business administration. It is particularly relevant where records are held across shared drives, email, collaboration platforms, line-of-business systems, paper files and outsourced storage.

What you will be able to do

  • Apply ISO 15489 principles to assess records management responsibilities and controls
  • Develop a functional classification scheme and file plan for business records
  • Construct a retention schedule using legal, regulatory, operational and evidential requirements
  • Define retention triggers, event dates and disposition actions for record series
  • Implement legal-hold procedures that suspend normal disposal activity
  • Assess metadata, repository and access controls for reliable digital records
  • Plan archival transfer, preservation and defensible destruction processes
  • Produce a records retention and archiving implementation package for a business function

Benefits of attending

For you

  • Create retention schedules with clear triggers, authorities and disposition actions
  • Identify weak recordkeeping controls before they cause audit or legal findings
  • Lead legal-hold coordination with legal, compliance and system owners
  • Evaluate whether digital repositories preserve authentic and usable records
  • Present a practical business case for records retention improvements

For your organisation

  • Reduces uncontrolled accumulation of paper and digital records
  • Improves evidence retrieval for audits, investigations and regulatory requests
  • Strengthens defensibility of disposal decisions and legal-hold controls
  • Clarifies accountability for records held in business systems and shared repositories
  • Creates a prioritised implementation plan for retention and archiving improvements

Course modules

19 modules over 10 days

Participants can explain the records lifecycle and distinguish records from other information assets.

  • Records lifecycle stages from creation through disposition and archival custody
  • Record, non-record and transitory information distinctions using business value
  • Evidential, operational, legal and historical value in retention decisions
  • ISO 15489 concepts of authenticity, reliability, integrity and usability
  • Physical, digital and hybrid records across common business repositories
  • Consequences of unmanaged records for audit, litigation and service delivery

Participants can define governance roles and policy components for a records programme.

  • Records policy hierarchy: policy, standard, procedure, schedule and guidance
  • RACI matrix for business owners, records staff, legal and technology
  • Executive sponsorship and governance forums for retention decision approval
  • Policy statements translated into measurable operational control requirements
  • Exception management for local laws, contracts and unusual record categories
  • Records-management KPIs, control testing and management reporting arrangements

Participants can build a records inventory that identifies ownership, location and risk.

  • Inventory scope defined by business function, repository and record series
  • Interview protocols for identifying undocumented records and local workarounds
  • Repository mapping for email, shared drives, paper and business applications
  • Capture record owners, custodians, volumes, formats and access restrictions
  • Data-flow diagrams tracing record creation, use, transfer and storage
  • Risk ratings based on sensitivity, volume, obligation and control weakness

Participants can create a functional classification structure and usable file plan.

  • Functional analysis separating business activities from organisational departmental structures
  • Classification levels: function, activity, transaction and record series
  • File-plan naming conventions supporting retrieval, aggregation and retention assignment
  • Controlled vocabulary rules for titles, subjects, clients and projects
  • Mapping legacy folders and repository labels to approved classifications
  • Usability testing through retrieval scenarios and ambiguous filing decisions

Participants can research and document authorities supporting retention rules.

  • Retention research sources: statutes, regulations, contracts, tax and industry rules
  • Authority registers linking record series to cited retention requirements
  • Minimum retention periods distinguished from operational and evidential needs
  • Jurisdiction analysis for cross-border records, branches and group entities
  • Research assumptions documented where legislation uses ambiguous retention language
  • Legal counsel review points for high-risk record series and exceptions

Participants can construct retention rules that business users and systems can apply.

  • Retention schedule fields: series, description, trigger, period and disposition
  • Record-series descriptions written to exclude unrelated documents and duplicates
  • Retention periods calculated from legal, financial and operational requirements
  • Disposition actions assigned: destroy, transfer, review or permanent preservation
  • Schedule notes capturing local variations, holds and confidential handling requirements
  • Approval workflow for drafting, validating and publishing retention schedules

Participants can define clear retention triggers and calculate disposition eligibility dates.

  • Event-based retention triggers such as contract expiry and case closure
  • Fixed-date retention rules for annual filings and periodic reporting
  • Trigger-event evidence recorded to support future disposition decisions
  • Calculating eligibility dates using closed-year, anniversary and rolling-period conventions
  • Multiple-trigger rules where several obligations apply to one record series
  • Inactive records distinguished from records eligible for authorised disposition

Participants can specify metadata and capture rules supporting reliable retrieval and retention.

  • Core metadata: title, creator, date, classification, identifier and retention rule
  • ISO 16175 functional requirements for digital recordkeeping systems
  • Mandatory metadata validation at capture for high-value business transactions
  • Unique identifiers linking records, cases, contracts and supporting correspondence
  • Audit trails recording creation, access, amendment, transfer and disposition events
  • Metadata remediation methods for inherited repositories and incomplete legacy files

Participants can apply recordkeeping controls to commonly unmanaged digital repositories.

  • Email appraisal based on business content rather than message format
  • Shared-drive clean-up using classification, ownership and retention-rule mapping
  • Collaboration-platform records in Teams, SharePoint and project workspaces
  • Duplicate management rules distinguishing convenience copies from authoritative records
  • Personal storage risks involving local drives, inboxes and unmanaged cloud accounts
  • Automated classification limits, exception handling and human quality checks

Participants can assess recordkeeping requirements within operational business systems.

  • System-of-record analysis for finance, HR, customer and case-management applications
  • Database retention rules applied to transactions, attachments and audit logs
  • Configuration requirements for access, retention, disposal and export controls
  • Vendor due diligence for record export, deletion evidence and preservation capability
  • Legacy-system decommissioning plans protecting records with continuing retention obligations
  • Data migration validation using reconciliation totals and sampled record comparisons

Participants can establish legal-hold controls that suspend routine disposition effectively.

  • Legal-hold triggers from litigation, investigations, audits and regulatory inquiries
  • Hold notices identifying scope, custodians, systems and prohibited actions
  • Custodian acknowledgement tracking and escalation for non-response or uncertainty
  • Suspending automated deletion while preserving normal business access requirements
  • Release procedures after legal confirmation and documented risk review
  • Hold registers linking matters, affected records, dates and responsible counsel

Participants can align retention controls with privacy, confidentiality and access requirements.

  • Personal-data retention aligned with purpose limitation and documented necessity
  • Access-control models using roles, least privilege and segregation of duties
  • Confidentiality classifications for employee, customer, commercial and investigation records
  • Redaction procedures for disclosure requests and archival access restrictions
  • Retention conflicts between privacy deletion requests and legal obligations
  • Access-log reviews identifying inappropriate retrieval, export or record alteration

Participants can evaluate storage conditions and controls for active and inactive records.

  • Storage risk assessment covering environmental, security, access and recovery controls
  • Physical-file controls: boxing, indexing, barcodes, checkout and location tracking
  • Offsite storage contracts covering retrieval times, destruction and chain of custody
  • Digital repository controls for encryption, backups, replication and privileged access
  • Business continuity requirements for vital records and essential service restoration
  • Repository assessments documented through control matrices and evidence registers

Participants can plan and document defensible records disposition and destruction.

  • Disposition workflow from eligibility review through approval, execution and evidence
  • Pre-destruction checks for holds, audits, exceptions and unresolved business needs
  • Destruction methods matched to media type, confidentiality and contractual requirements
  • Certificates of destruction containing scope, method, date and authorisation
  • Disposition logs linking destroyed records to approved schedule authorities
  • Sampling techniques for verifying destruction accuracy and completeness

Participants can select records for archival preservation and manage transfer procedures.

  • Archival appraisal criteria: evidential value, uniqueness, significance and research value
  • Permanent records identified through retention schedules and appraisal review
  • Transfer lists documenting series, dates, extent, restrictions and provenance
  • Chain-of-custody controls for physical and digital archival transfers
  • Accession procedures establishing ownership, custody and access responsibilities
  • Access restrictions balanced against transparency, privacy and donor conditions

Participants can plan preservation actions for long-term access to digital records.

  • Digital preservation risks from format obsolescence, media failure and software dependency
  • OAIS reference model concepts for ingest, storage, management and access
  • Preservation formats selected using openness, documentation and adoption criteria
  • Fixity checks using checksums to detect unauthorised file corruption
  • Migration plans preserving content, metadata, relationships and rendering fidelity
  • Preservation metadata recording technical characteristics, provenance and preservation actions

Participants can test records controls and report findings to governance stakeholders.

  • Records-control audit plans based on risk, materiality and control objectives
  • Testing samples for classification accuracy, retention assignment and disposal evidence
  • Control design versus operating effectiveness in records-management assurance reviews
  • Findings rated by impact, likelihood, root cause and remediation priority
  • Corrective-action plans with owners, deadlines, evidence and follow-up testing
  • Dashboard measures for backlog, retrieval, holds, disposal and training completion

Participants can prepare a phased implementation plan for improved records retention controls.

  • Gap analysis comparing current controls against policy and ISO 15489 requirements
  • Prioritisation matrix using legal risk, business impact, cost and implementation effort
  • Phased roadmap covering policy, schedule, systems, migration and user adoption
  • Stakeholder engagement plans for executives, users, legal, IT and archives
  • Training needs analysis for record creators, custodians, approvers and administrators
  • Implementation risks, dependencies, decision gates and escalation arrangements

Participants can build, review and present a complete records retention and archiving package for a defined business function.

  • Business-function scope defining record series, repositories, owners and key obligations
  • Classification and file plan mapped to identified business activities
  • Retention schedule with authorities, triggers, periods and disposition actions
  • Legal-hold, access-control and secure-destruction procedures integrated into governance
  • Archival transfer and digital-preservation requirements for permanent record series
  • Peer review against audit criteria, implementation risks and stakeholder requirements

Exercises and examples are adapted to each cohort's sectors and roles.

What you take back to work

  1. Records inventory template
  2. Functional classification and file-plan model
  3. Retention schedule template
  4. Legal-hold procedure checklist
  5. Disposition approval and destruction log
  6. Records retention implementation roadmap

Who should attend

  • Records Managers — responsible for retention schedules, file plans and disposition governance
  • Information Governance Managers — need defensible controls across information repositories
  • Compliance Officers — must evidence adherence to regulatory recordkeeping requirements
  • Legal Operations Professionals — administer litigation holds and discovery-ready records
  • Archives and Digital Preservation Staff — manage archival transfer, access and long-term custody
  • Business Systems Managers — configure recordkeeping controls within operational platforms

Skills and tools covered

Records lifecycle managementRetention schedule designRecords classificationLegal hold administrationDigital preservation planningDisposition audit controls

Tools and standards

ISO 15489-1, ISO 16175, OAIS Reference Model, RACI Matrix

How the course runs

Training methodology

The course uses short instructor briefings to introduce standards, policy structures and control methods. Participants analyse retention scenarios, classify sample records, interpret regulatory requirements and test disposal decisions against audit and litigation conditions. Group work examines common failures in email, shared drives, cloud repositories, paper storage and business systems. Simulations cover legal holds, retrieval requests, archival transfer and disposition approval. Individual application planning connects course methods to each participant’s record types, systems, governance roles and immediate improvement priorities.

Requirements and prerequisites

Participants should have practical exposure to business records, document repositories, compliance processes, archives, legal operations or administrative controls. Familiarity with their organisation’s main record types, systems and approval routes is helpful. They should be comfortable reading policy documents, discussing operational risks and working with tabular schedules. Prior records-management certification, archival qualification, legal training, ISO auditing experience or technical system-administration skills are not required. The course explains relevant standards and terminology before applying them to retention and archiving decisions.

A typical training day

08:30 – 10:30First session
10:30 – 10:45Refreshment break
10:45 – 12:30Second session
12:30 – 13:30Lunch and networking
13:30 – 15:00Third session
15:00 – 15:15Refreshment break
15:15 – 16:30Workshop and daily review

Live online deliveries follow the same structure in East Africa Time, with shorter screen blocks and longer breaks.

What the fee includes

  • Instruction by a practitioner facilitator
  • Full course workbook and materials
  • Exercise files, templates and case studies
  • Refreshments and lunch on classroom deliveries
  • Certificate of completion
  • Post-course application plan

Frequently asked questions

Participants need familiarity with business records, document repositories or compliance processes. No formal records-management qualification, archival training or legal background is required.

Participants should bring examples of record categories, retention concerns, relevant policies or system descriptions where organisational rules allow. Confidential documents are not required; anonymised examples are sufficient.

The course is designed for records, information governance, compliance, legal operations, archives and business systems professionals. It also suits managers assigned responsibility for improving local filing, retention or disposal controls.

Document management courses focus mainly on storing, finding and collaborating on documents, while data protection courses focus on personal-data obligations. This course addresses the full records lifecycle, retention decisions, legal holds, disposition evidence and archival custody.

Participants leave with a structured package that can be adapted to a business function, repository or record series. It supports immediate work on inventories, retention schedules, legal-hold procedures, repository assessments and implementation planning.

The first part establishes lifecycle, governance, classification and retention design methods. The later modules address systems, legal holds, disposition, archives, assurance and implementation, ending with a capstone presentation. Each training day runs from 08:30 to 16:30 and provides about 6.5 contact hours.

Questions about this course?

Ask about dates, fees, group bookings or running it for your team. Our training team replies by email.