Taman Megah · Petaling Jaya

The application already holds the records. We audit what it does with them.

System Kernel Path is a small practice on Jalan SS 24/11. We sit with SharePoint tenancies, M-Files vaults, OpenText libraries, Laserfiche repositories, and the file servers that still pretend to be a document system — then write down what they actually do.

Request a scoping call

Metal shelving filled with labelled archive boxes
Field note: an application audit starts with the store people actually use, not the architecture diagram from go-live.

What can be requested

These are booked as scoped engagements from the Petaling Jaya studio. Pricing is discussed after we know the repositories, sites, and whether you need a written report for an internal owner or for a regulator-facing file.

  1. 01
    Document management application audit

    A full reading of how the live system stores, names, retains, and releases records.

    Three to six weeks, depending on repositories and sites
  2. 02
    Access control and permission review

    Who can open, move, share, or delete a record — including guests and inherited groups.

    Two to four weeks
  3. 03
    Retention, holds, and disposal audit

    Whether labels, legal holds, and disposal jobs match Malaysian record-keeping duties.

    Two to five weeks
  4. 04
    Migration readiness assessment

    Before you move vaults, we count what would break, duplicate, or vanish.

    Three to five weeks
  5. 05
    Vendor configuration review

    A second reading of how a vendor or internal team set up the live application.

    One to three weeks

From recent fieldwork

Selangor · construction contracts

214 sharing links still open after practical completion

A vault used by consultants had never had its guest links reviewed. We counted what was still reachable, split drawings from declared contracts, and gave the commercial team a revoke order they could actually run.

Klang Valley · finance libraries

Retention labels published, almost none applied

Purview looked complete in the catalogue. The working libraries did not apply a label. The report named the auto-apply policies that pointed at a renamed department, and the drop library that had to stay separate from the official store.

How we work

A method you can walk into a tenancy with

Inventory, sample, compare with policy, write findings in the order of harm. The full sequence — including what we need from you before week one — is on the methodology page.

Read the audit sequence