We implemented a Records & Information Management program last year and are looking to mature the program in 2024 and beyond. We would also like to have an external vendor review our program to date. Does anyone have suggestions on firms who can come in and do this for us?

What stage is your program a lifecycle management doc with retention plan only or further along and integrated into your IMS (information mgmt system)?  What is the aim of your review to confirm your documented program is fit for purpose or that the integration to the app is working as per our lifecycle plan and retention plan.  If it's for lifecycle and retention plan doc get an Information Governance Advisory Service from the primary vendors e.g. Iron Mountain or their equivalent.    if review the integration get an audit organization as it will support your defense in future for incident investigations.

We use Zasio for guidance related to our Records Retention Program.  I believe they offer a tool/software in this space as well, but we only use their consulting services.  Prior to my time at Dover, the team used Zasio to do a full review of the Record Retention policy and retention schedule, which was global in scope. Today, we mostly call on them on an ad hoc basis when specific questions or concerns come up.