What is the role of auditing in RIM?

• A. Provides daily user support for records software
• B. Determines budget for IT
• C. Negotiates vendor contracts for hardware
• D. Verifies compliance with policies, retention schedules, and disposal; identifies gaps and improves processes

Answer: (D)

Auditing in RIM is about verifying that how records are created, stored, retained, and disposed follows established policies and retention schedules. It involves checking records inventories, classifications, access controls, and disposal practices to confirm compliance, identify gaps, and provide recommendations to strengthen the program. This ensures regulatory compliance, reduces risk, and supports governance by demonstrating due diligence and a commitment to ongoing improvement. The other activities—daily user support for software, budgeting for IT, and negotiating vendor contracts—are operational or financial tasks, not the evaluative, governance-focused function of auditing.