document management systems

Aside from the obvious, ensuring that access to restricted information is only accesible to authorised users only - what other things should an audit of a document management system focus on? If you are from a records/document management background, what key checks would you focus on in an audit/healthcheck? This is for a solution already implemented, not for reviewing potential software apps in this area.
LVL 4
pma111Asked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

EirmanChief Operations ManagerCommented:
Thinking beyond the obvious encryption of data and backups .....

Have you cross-cut shredders and a strict shredding policy.
Are all documents available on all machines.
Can anyone insert a USB device and copy files.
Is there there proper recording of logins,
Are records kept of who prints what.
Do all PCs need access to a printer.
Are local printers a risk.
Are passwords ever shared.
Are passwords written down on Postit notes.
Are passwords changed when employees leave.
Are passwords complicated enough.
(If a user has a strong password mentally stored, don't force periodic changes unless it has been compromised).

The human factor should always be a major consideration in any security assessment.
Human > laziness  ....... gullibility  ........ greed .......... curiosity

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Document Management

From novice to tech pro — start learning today.