5. What methodology should be used to define management rules?

The first step is to draw up an inventory of documented information. A process-based approach coupled with a workstation-based analysis enables us to identify the documented information that is essential for the efficient running of the company (information flow), for the traceability of operational activities (evidence), for communication with customers, suppliers and other service providers (expression of needs, complaints), for the long-term preservation of evidence (regulatory requirements), and for the history of the company (preservation of archives).

Next, you identify the medium of the original information: computer data in a software package, computer files, paper. And you determine the legal retention periods. This step enables you to identify the information you need to keep for the long term. It may be useful to convert information to make it readable...