Page 4 of the DSE Business Continuity knowledge center, with source-backed guidance and practical next steps.
Preparation and recovery guidance that connects technology protection to real service continuity and tested restoration.
Michigan’s Public Health Code requires licensed health professionals and health facilities to keep each patient record at least 7 years from the date of service, longer where other law or medical standards require, and 15 years for certain records. Expired records must be shredded, incinerated, electronically deleted or otherwise disposed of confidentially.
Read the guide
EPA says most lithium-ion batteries are likely RCRA hazardous waste when discarded, ignitable and reactive, and that businesses must determine whether their waste is hazardous. It recommends managing them under the federal universal waste rules, keeping them out of trash and municipal recycling, and taping terminals and bagging each battery.
Read the guide
Michigan’s Student Safety Act set up the OK2SAY hotline, run by the State Police, for confidential reports of potential harm or self-harm involving students, school employees or schools. Tips are exempt from FOIA, and each school must update emergency contacts for at least one official at least biannually.
Read the briefing
IRS guidance says to keep records 3 years in most cases, 3 years from filing or 2 from payment for refund claims, 7 years for worthless-securities or bad-debt claims, 6 years for substantially underreported income, indefinitely if no return or a fraudulent return was filed, and employment tax records at least 4 years.
Read the guide
OSHA requires fall protection at 4 feet in general industry and 6 feet in construction, and its roofing guide says covers over skylights and roof openings must hold at least twice the expected load, be secured against displacement and be marked HOLE or COVER. Personal fall arrest systems must keep any free fall to 6 feet or less.
Read the guide
OSHA says trench collapses pose the greatest risk to workers in excavations, requires a protective system for trenches 5 feet deep or more and an engineer-designed one at 20 feet or more, and requires a competent person to inspect trenches and protective systems daily and as conditions change before work begins.
Read the guide
Michigan’s MISS DIG Underground Facility Damage Prevention and Safety Act requires excavators to give the MISS DIG notification system a dig notice at least 72 hours, but not more than 14 calendar days, before powered digging, and to expose marked facilities by soft excavation before using power equipment within 48 inches of the marks.
Read the guide
The FTC says only scammers tell people to buy gift cards and hand over the numbers, and no real business or government agency will tell anyone to pay by gift card. Its guidance lists urgency, instructions on which cards and stores to use, and requests for the card number and PIN as warning signs, and explains how to report and seek refunds.
Read the guide
Intuit’s discontinuation policy says QuickBooks Desktop 2023, including Pro Plus, Premier Plus, Mac Plus and Enterprise Solutions 23.0, was discontinued after May 31, 2026. Discontinued versions lose live support, Intuit services such as Desktop Payroll, payments and online bank feeds, and critical security updates.
Read the briefing
CISA’s February 2026 guidance defines doxing as gathering someone’s PII or an organization’s sensitive information and releasing it publicly or using it maliciously, notes it can lead to extortion, social engineering and swatting, and lists protective steps for documents, data brokers and social media, plus response steps for victims.
Read the playbook