Legacy systems often hold large volumes of high-risk records with limited governance controls and poor visibility. Decisions to migrate, decommission, or maintain these systems are rarely straightforward.
Governance should guide decisions about legacy systems — not convenience, cost alone, or organisational inertia.
Reflection questions:
- Do you have legacy systems holding critical or regulated records?
- Is there a clear plan for managing or retiring those systems?
Action:
List one legacy system and the key records-related risks it presents.