原文 | | |
| | 看到这个标题让我对这个章节的内容有了一丝丝期待 该讲点接地气的东西了吧 但是策略两个字又让我心头有了一丝不安 |
A strategy should be developed to ensure the long-term retention of regulated or operational data output by a business process. | 应当制定策略,以确保长期保存业务流程输出的监管或操作数据。 | |
The retention strategy should focus on the management of the data throughout its lifecycle, not just on the initial creation of data within the process. | 保存策略应侧重于整个生命周期内的数据管理,而不仅仅是过程中数据的初始创建。 | |
Use of electronic records as the original/official records supporting business processes continues to increase. | 电子记录作为支持业务流程的原始/官方记录的使用继续增加。 | |
Therefore, it is imperative to apply critical thinking to develop the retention strategy in the planning phase for a new process or system. | 因此,在新的过程或系统的规划阶段,应用批判性思维制定保存策略势在必行。 | |
This will help ensure data is maintained in its dynamic format throughout the data lifecycle as long as reasonably possible. | 这将有助于确保数据在整个数据生命周期内以其动态格式尽可能长时间地保存。 | |
The risk is that as technology advances, old file types become obsolete, driving companies to: | 风险在于,随着技术的进步,旧文件类型会过时,促使公司: | |
• Maintain obsolete technology to continue to read and access the files, which can increase data integrity risks | •保持过时的技术继续阅读和访问文件,这会增加数据完整性风险 | |
• Migrate the data so that new technology can continue to read the record | •迁移数据,以便新技术能够继续读取记录 | |
There are risks associated with any strategy, and assessing those risks and planning a broad methodology for record and data retention at the beginning of a system’s lifecycle allows the plan to be adjusted as technology changes or as systems go through their lifecycle. | 任何策略都有风险,在系统生命周期开始时评估这些风险并计划广泛的记录和数据保存方法,允许随着技术变化或系统通过其生命周期对计划进行调整。 | 你的意思是在系统生命周期初期就要考虑到后面的所有技术变化? 那这个要求不低哦,能做到的供应商出来举个手 合同里写一下技术更新以后的服务策略 |
As such, it is imperative for a company to have a strategy in place that will lead their employees through the process; without this, the company increases its risk as the system moves toward its end of life. | 因此,公司必须有一个战略来领导员工完成这一过程;如果没有这个战略,随着系统走向临终,公司就会增加其风险。 | 如果说思考的点在于,提前想好目前这个系统的迭代方案,可能还相对简单一点 |
The longer a system goes without a retention strategy, the greater the likelihood the company will lose the ability to migrate or maintain records to the end of their retention period. | 系统在没有保存策略的情况下运行的时间越长,公司失去迁移或维护记录至其保留期结束的能力的可能性就越大。 | |
Typically, as data ages, the need for it to be processible decreases until at some point, a risk-based decision to change to a static format may be appropriate. This is discussed in Section 7.2. | 通常,随着数据的老化,对其可处理性的需求降低,直到某个时间点,基于风险的变更为静态格式的决策可能是适当的。这在第7.2节中讨论。 | |
In order for data integrity to be ensured within the system and data lifecycles, a retention strategy should be crafted during the design phase and ensure that data remains secure and protected from deliberate or accidental changes, manipulations, or deletions throughout the retention period. | 为了确保系统和数据生命周期内的数据完整性,应在设计阶段制定保存策略,并确保在整个保存期间数据保持安全,防止故意或意外变更、操作或删除。 | |
The strategy for archiving GxP data also needs to be planned, whether it is archived electronically or using a paper-based system. | 还需要计划GxP数据的归档策略,无论是电子归档还是使用纸质系统归档。 | |
An electronic archiving system, both hardware and software, must be designated as a computerized system and validated to ensure the integrity of the data, and make certain that it is accessible and readable. See Appendices O2 and O3 for more details on archiving requirements. | 电子归档系统(包括硬件和软件)必须被指定为计算机化系统,并经过验证以确保数据的完整性,并确保其可访问和可读。有关存档要求的更多详细信息,请参见附录O2和O3。 | |
The data governance for the records in any new computerized system and the archive solution should be aligned early. | 任何新的计算机化系统中记录的数据管理和归档解决方案应尽早保持一致。 | 结合下面一句话,我的理解是新上系统必须要和归档系统相适配 免得新系统的数据归档以后不可读? |
Where problems with long-term access to data are envisaged, or when computerized systems must be retired, mitigation strategies for ensuring continued readability of the data should be established. | 如果可以预见到长期获取数据存在问题,或者必须停用计算机化系统,则应制定缓解策略,以确保数据的持续可读性。 | |
These may include virtualization of the original computerized systems, which is discussed in Appendix O5. | 这可能包括附录O5中讨论的原始计算机化系统的虚拟化。 | |
As regulated companies increasingly utilize cloud-based services, a SaaS provider may need to offer appropriate strategies to ensure adequate controls are in place for data retention. | 随着受监管公司越来越多地利用基于云的服务,SaaS供应商可能需要提供适当的策略,以确保对数据保存进行充分控制。 | |
See ISPE GAMP® Good Practice Guide: IT Infrastructure Control and Compliance (Second Edition) [19] for additional considerations around cloud-based services and data retention. | 有关基于云的服务和数据保存的其他注意事项,请参阅ISPE GAMP良好实践指南:IT基础设施控制和合规性(第二版)。 | |
The high-level elements of the strategy should be defined in a corporate data governance document as discussed in ISPE GAMP® Guide: Records and Data Integrity Section 3.3.6 Policies and Standards [8], listing the necessary elements, plus ones to consider, for the record retention of a system or project. | 如ISPE GAMP指南:记录和数据完整性第3.3.6节政策和标准所述,应在公司数据管理文件中定义战略的高级别要素,列出系统或项目记录保存所需的必要要素以及需要考虑的要素。 | |
Refer to Appendix O1 – Retention, Archiving, and Migration [8] of the same Guide for information on how to document the retention strategy for a particular system. | 有关如何记录特定系统的保存策略的信息,请参阅同一指南的附录O1-保留、归档和迁移。 | |
The key points to a retention strategy are knowledge and consideration of data classification and intended use, readability, availability, access, and data ownership. | 保存策略的关键点是知识和数据分类和预期用途、可读性、可用性、访问和数据所有权的考虑。 | |
A good place to start when developing a strategy is to document this information in the form of a risk assessment with the goal of documenting the business needs, associated risks, and current mitigation plans. | 在制定策略时,一个很好的起点是以风险评估的形式记录这些信息,目标是记录业务需求、相关风险和当前缓解计划。 | |
As new information becomes available over the system lifecycle, the assessment can be updated easily to reflect such changes. | 随着新信息在系统生命周期内可用,可以很容易地更新评估,以反映此类变更。 | |
See Figure 4.1 Data Integrity by Design Process Flow Diagram for an overview of the assessment during the system’s lifecycle. | 系统生命周期内的评估概述见图4.1设计过程的数据完整性流程图。 | |
This approach keeps the retention strategy up-to-date and representative of the current needs for the system against the ability and feasibility in technology. | 这种方法使保存策略保持最新,并根据技术的能力和可行性代表系统当前的需求。 | |
The following sections provide a more thorough breakdown of the details to consider. | | 我刚要说果然只是个策略 马上又来吊胃口了 不愧是你 |