...
Technically the transaction data is bound to entity identity data by the signer's name captured in the electronic signature and by a shared identifier (permit number) in the registration data (electronic fish ticket agreement), the processor permit database, and in the e-ticket submissionssubmission. (See document binding and integrity for a broader discussion of these issues and alternatives.)
...
- Create and maintain documentation of the systems used to create the records that contain electronic signatures.
The West Coast E-fishticket system will be thoroughly documented with particular attention to e-signature aspects and audit trails that establish the trustworthiness of the e-signature. - _Ensure that the records that include electronic signatures are created and maintained in a secure environment that protects the records from unauthorized alteration or destruction._
Panel Dave or Dayna needs to check that the statements below are accurate
The fish ticket data, and the audit trail data supporting the trustworthiness of the e-signature, are implemented with the history mechanism described above to protect the records from unauthorized alteration or deletion. Furthermore the database is secured according to industry norms for important government data, including regular offsite backup and periodic permanent archiving of backups. - Implement standard operating procedures for the creation, use, and management of records that contain electronic signatures and maintain adequate written documentation of those procedures.
Standard operating procedures will be implemented for the creation, use and management of these records. - Create and maintain records according to these documented standard operating procedures.
The new standard operating procedures will be diligently followed. - Train agency staff in the standard operating procedures.
Agency staff will be trained. - Obtain official disposition authorities from NARA for both the records that contain electronic signatures and for the associated records which are necessary for trustworthy records.
Electronic data submission adds audit trail data to the fish ticket records already covered under file series 1505-11 (Catch Statistics Files), and, establishes a link to an associated file series 1504-11(Fishing Vessel Permit Files). File series 1505-11 is sufficiently broad to accommodate the addition of audit trail data. The existing retention and access policies do not need to be revised, as the new audit trail data elements are component parts of the same database which stores the fish ticket records. File series 1504-11 provides disposition authority for the associated permit records which are used to establish confidence in the identity of the party applying an e-signature, and that file series needs no changes as a result of this new association.
...