The NARA Federal Records Management Self-Assessment

The National Archives and Records Administration (NARA) is responsible for overseeing how federal agencies manage their records across the executive branch. One of the principal instruments NARA uses to exercise that oversight is a periodic self-assessment: a structured questionnaire that agencies complete to report on the maturity, coverage, and risk profile of their records management programs. Rather than auditing every agency in detail, NARA asks agencies to evaluate themselves against established requirements and then aggregates the responses to identify systemic strengths, gaps, and trends across government.

The self-assessment is best understood as a governance and risk tool, not a pass/fail exam. Its purpose is to give NARA a government-wide picture of records management health, to give individual agencies a mirror for honest internal review, and to inform where NARA should focus guidance, training, and follow-up. Because the federal records landscape has shifted decisively toward electronic and born-digital information, the assessment’s emphasis has steadily moved away from paper-era practices and toward electronic recordkeeping, automation, and the disposition of digital records.

What the Self-Assessment Measures

The assessment is organized around the core lifecycle obligations that federal law and NARA regulation place on agencies. While the exact questions and scoring evolve from cycle to cycle, the recurring themes are consistent. Agencies are generally asked to report on:

• Program foundations — whether the agency has a designated records officer, current records management policies and directives, and senior-level accountability for the program.
• Records scheduling and disposition — whether records (especially electronic records) are covered by approved schedules, including applicable General Records Schedules, and whether eligible records are actually transferred or destroyed on time.
• Electronic records management — how the agency manages email, electronic messaging, and other digital records, and whether systems support capture, retention, and disposition.
• Training and awareness — whether staff receive role-appropriate records management training.
• Risk and oversight — internal controls, monitoring, and the agency’s own ability to detect and correct deficiencies.

The questions are designed so that responses can be rolled up into maturity or risk levels, allowing NARA to compare agencies and track movement over time rather than scoring any single program in isolation.

How Agencies Respond and Report

Responsibility for completing the assessment typically falls to the agency records officer, working with program offices, IT, legal, and information governance staff. Accurate responses require coordination, because no single office usually has full visibility into how records are created and retained across an entire department.

Agencies are expected to answer based on evidence rather than aspiration. NARA’s guidance consistently encourages programs to base their responses on documented policies, system capabilities, and actual disposition activity rather than on intentions. A useful internal practice is to treat each cycle as an opportunity to gather supporting documentation — schedules, training records, system inventories, and disposition logs — so that the reported posture is defensible and so that year-over-year comparisons are meaningful.

From Endorsement of DoD 5015.2 to Functional Requirements

A significant shift in the standards environment directly affects how electronic recordkeeping is evaluated. For many years, the Department of Defense’s DoD 5015.2 standard served as a widely referenced specification for records management application functionality, and NARA endorsed it. NARA later revoked that endorsement (effective in 2022), signaling a move away from certifying products against a single design standard.

In its place, NARA and its partners advanced the Universal Electronic Records Management (ERM) Requirements and the related Federal Electronic Records Modernization Initiative (FERMI). The intent is to express what records management capabilities are needed — capture, maintenance, disposition, transfer, and metadata — in technology-neutral, function-based terms, so agencies can acquire and configure modern systems that meet outcomes rather than match a legacy checklist. As a result, self-assessment questions about electronic records increasingly probe whether agencies meet these functional requirements and whether their systems support automated, defensible disposition.

How NARA Uses the Results

NARA does not treat the self-assessment as the end of the process. Aggregated results feed into NARA’s broader oversight reporting to leadership and, ultimately, inform the public picture of federal records management. Where the data reveals widespread weaknesses — for example, in scheduling electronic records or in managing messaging applications — NARA can respond with updated guidance, targeted outreach, or expectations communicated through bulletins and memoranda.

For individual agencies, weak self-assessment results can prompt closer engagement, requests for corrective action plans, or follow-up inquiries. The assessment therefore functions as an early-warning and prioritization mechanism: it helps NARA decide where limited oversight resources will do the most good, and it gives agency leadership a documented basis for investing in program improvements.

Turning the Assessment Into Program Improvement

The most effective records officers treat the self-assessment as a planning tool rather than a compliance chore. Each cycle produces a structured inventory of strengths and gaps that can be mapped directly to a program roadmap. Common follow-on actions include closing schedule coverage gaps, retiring unscheduled legacy systems, deploying or configuring electronic recordkeeping capabilities to meet functional requirements, and strengthening training for high-risk record creators.

Because the assessment recurs, it also supports continuous improvement. Comparing results across cycles shows whether investments are working and surfaces backsliding before it becomes a serious liability. Agencies that integrate the assessment into their normal governance rhythm — aligning it with information governance, privacy, FOIA, and IT modernization efforts — tend to report steadier, more defensible programs. Viewed this way, the self-assessment is less a report card and more a recurring health check that keeps records management visible to leadership and anchored to current federal expectations. For a broader view of how this fits with other obligations, see the compliance and standards hub.