Documentation for virus scanning and reporting should highlight risky behavior, when and how to scan and how and why to report problems. Disaster Recovery - A Disaster Recovery plan should include an estimated maximum outage time and a general plan to keep business operations functioning. Documentation should list how to add and remove access for staff members. For example, Financial Transactions limited to a specific department. Documentation should say how Data Value Security is set up, how it is controlled, and who controls it.
All systems have emergency procedures which allow for repairs to damaged records.
Each system should have Documentation. In newer online systems, documentation is incorporated in Help Files and Web Pages. Generally, vendor supplied systems have this feature. Local staff should employ such vendor supplied control features. NOT shared - Sharing confuses audit trails, can result in more access than is necessary, and can result in unnecessary errors.