MMC Technology & Digital Records Systems 4 — Questions and Answers
Question 1: A municipal clerk discovers that a contractor improperly deleted 200 electronic permit records that should have been retained for 10 years. What is the most appropriate first step?
- Recreate the records from memory and backdate them
- Immediately notify the city attorney and IT department and attempt to restore from backups (Correct answer)
- Issue a press release explaining the loss
- Begin a new retention schedule from the date of discovery
Correct answer: Immediately notify the city attorney and IT department and attempt to restore from backups
Unauthorized destruction of records with active retention requirements triggers a legal and administrative response; the clerk must immediately involve legal counsel and attempt data recovery.
Question 2: In the context of digital records, what is 'format migration' and when is it necessary?
- Moving records from one physical server to another in the same building
- Converting records from an obsolete file format to a current one to ensure continued accessibility (Correct answer)
- Changing the classification code assigned to a record series
- Transferring records from a department's server to the city's central archive
Correct answer: Converting records from an obsolete file format to a current one to ensure continued accessibility
Format migration converts files from outdated formats (e.g., WordPerfect) to current ones to prevent loss of access as software support ends, a core digital preservation activity.
Question 3: A state law requires that official minutes be posted online within 10 business days of approval. Which system feature best ensures compliance with this requirement?
- An email reminder sent to the clerk on day 9
- An automated workflow in the agenda management system that tracks approval status and triggers publication (Correct answer)
- A paper calendar posted in the clerk's office
- A shared spreadsheet maintained by the deputy clerk
Correct answer: An automated workflow in the agenda management system that tracks approval status and triggers publication
An automated workflow with built-in deadline tracking and publication triggers is the most reliable method to ensure consistent, timely compliance with statutory posting requirements.
Question 4: What is a 'digital signature' and how does it differ from a scanned handwritten signature?
- A digital signature is an image of a handwritten signature; a scanned signature is captured on a tablet
- A digital signature uses cryptographic keys to verify signer identity and document integrity; a scanned signature is merely an image with no security properties (Correct answer)
- A digital signature requires notarization; a scanned signature does not
- There is no legal difference between the two under federal e-signature law
Correct answer: A digital signature uses cryptographic keys to verify signer identity and document integrity; a scanned signature is merely an image with no security properties
Digital signatures use public-key infrastructure (PKI) to cryptographically bind the signer's identity to the document and detect any post-signing alterations, providing much stronger authentication than a scanned image.
Question 5: Which approach best supports the principle of 'least privilege' in a municipal document management system?
- Giving all staff administrator rights to avoid helpdesk requests
- Granting each user only the access permissions necessary to perform their specific job functions (Correct answer)
- Sharing a single department login to simplify training
- Allowing read access to all records for any logged-in city employee
Correct answer: Granting each user only the access permissions necessary to perform their specific job functions
Least privilege limits each user's access to only what their role requires, minimizing the risk of accidental or malicious unauthorized access, modification, or deletion of records.
Question 6: A public records request asks for all metadata associated with a specific Word document created by the mayor's office. Is metadata a public record?
- No, metadata is technical data and not subject to disclosure
- Yes, in most jurisdictions metadata is part of the record and subject to disclosure unless a specific exemption applies (Correct answer)
- Only if the metadata was intentionally created by the author
- Only metadata created by the clerk's office is subject to disclosure
Correct answer: Yes, in most jurisdictions metadata is part of the record and subject to disclosure unless a specific exemption applies
Courts and records laws in most states have held that metadata embedded in electronic records is part of the record itself and must be disclosed unless a specific statutory exemption applies.
Question 7: Which standard provides the most widely recognized framework for implementing an information security management system to protect municipal digital records?
- ISO 15489 (Records Management)
- ISO/IEC 27001 (Information Security Management) (Correct answer)
- ANSI/ARMA 8 (Principles of Records and Information Management)
- NIST SP 800-53 (Security Controls for Federal Systems)
Correct answer: ISO/IEC 27001 (Information Security Management)
ISO/IEC 27001 is the internationally recognized standard for establishing, implementing, and maintaining an information security management system applicable to any organization, including local governments.
MMC Technology & Digital Records Systems 4
A municipal clerk discovers that a contractor improperly deleted 200 electronic permit records that should have been retained for 10 years.
What is the most appropriate first step?