This IDC study discusses the results of a survey conducted in May 2005 to determine the scope, maturity, and drivers of firms' records retention strategies and the role of technology to enforce retention. A sound information management for compliance program includes the development and documentation of corporate information policies, implemented through people, procedures, and technology. Policies related to how a firm manages its information and retains physical and electronic records in order to satisfy stakeholders is paramount to compliance with today's business regulations.

According to Laura DuBois, research director, IDC Storage Software, "While retention policy development and documentation are occurring at the enterprise level, the implementation and enforcement of policies are taking place on an application or divisional basis. Key focus areas for firms developing retention policies include messaging, database, and Web applications."