Recently released papers by the Government Accounting Office (GAO) [USA] findings may be of interest to you. Below are the links to the two papers and US Archivist Ferriero's comments:
National Archives and Records Administration Needs to Implement Key Program Elements and Controls
The GAO found NARA has not effectively implemented information security controls to sufficiently protect the confidentiality, integrity, and availability of the information and systems that support its mission. NARA did not fully implement access controls, which are designed to prevent, limit, and detect unauthorized access to computing resources, programs,
information, and facilities.
To read the report go to: http://www.gao.gov/new.items/d1120.pdf
[Shortly after this appeared, the Washington Post reported, Federal agents raided the home of a former National Archives employee and took 10-20 cases--it was not stated what materials were in the boxes and the former NARA employee was not arrested. To read the article See:
The effectiveness of NARA's oversight has been improved by recent increases in its oversight activities: NARA has conducted its first government wide records management self-assessment survey, resumed agency inspections after a long gap, and expanded its reporting (including giving more complete information about specific agencies).
Oversight and Management Improvements Initiated, but More Action Needed
These efforts have provided a fuller picture of government wide records management: in particular, NARA found that almost 80 percent of agencies were at moderate to high risk of unlawful destruction of records.
Archivist Ferriero's comments in a press release may be found at:
Jan Meisels Allen
Chairperson, IAJGS Public Records Access Monitoring Committee