Records are maintained in secure buildings or areas with access limited to only those individuals whose duties require access. The computer files are password controlled with system generated forced password-change protocols. Records are secured in locked or guarded buildings, locked offices, or locked cabinets during nonduty hours. Records are cutoff at the end of the fiscal year, retained for three fiscal years, and then destroyed. Rejected applications are destroyed 1 year from date of rejection.
Information is provided by the record subject and gathered from travel orders.