Section 308.9 - Records systems-management and control(a) The Director, Office of Administrative Services, shall have overall control and supervision of the security of all records keeping systems and shall be responsible for monitoring the security standards set forth in these regulations.(b) A designated official (System Manager) shall be named who shall have management responsibility for each record system maintained by the agency and who shall be responsible for providing protection and accountability for such records at all times and for insuring that such records are secured in appropriate containers wherever not in use or in the direct control of authorized personnel.