Records Management
What is Records Management?
The systematic control of records throughout their lifecycle from creation through maintenance, use, and disposition according to retention policies.
Terms that appear alongside records management
Each of these is named in at least one of the same controls as records management. The number is how many controls name both.
- compliance 7 shared controls
- nist 3 shared controls
- audit 3 shared controls
- policy 3 shared controls
- gdpr 3 shared controls
- governance 3 shared controls
- chain of custody 3 shared controls
- risk assessment 2 shared controls
Frameworks that govern records management
What the standards actually require on records management
Requirements naming records management across 6 standards, quoted from the control text.
Training and education records are required to be kept in the way section 4.9 specifies.
nfpa-1600-standard-on-continuity-emergency-and-crisis-management::8.5 · 8.5 Training records kept under the records management program →The organisation keeps security incident records in a protected repository and maintains it. It examines those records on a regular basis to spot recurring patterns, underlying causes and systemic weaknesses, and puts suitable corrective actions in place.
cloud-security-alliance-cloud-controls-matrix-ccm-v4-1::SEF-09 · Incident Records Management →Schedule 1 DPP2 Accuracy and Retention Principle requires all practicable steps shall be taken to ensure that personal data is accurate having regard to the purpose for which it is to be used, and is not kept longer than is necessary for the fulfilment of the...
HK-PDPO-DPP2-Accuracy-Retention-Records · HK PDPO DPP2 Accuracy + Retention Principle + Records Management →Electronic discovery can expose the organization or its governing body to threats with damaging consequences, and governance can help avoid: breaches of regulatory requirements on privacy, health and safety and records management;
iso-iec-27050-1-2019::6.5.2 · Risk and environmental factors →Keeping the system compliant while it is in use is the regulated company's responsibility. It meets it by putting in place suitable operational and system management procedures for handover, support services, monitoring, incidents and problems, CAPA, change an...
gamp-5-good-automated-manufacturing-practice::6.2.11 · 6.2.11 Maintaining System Compliance During Operation →Records are to be safeguarded against being lost, destroyed, falsified, accessed without authorization or released without authorization.
iso-27002-2022::5.33 · Protection of records →Questions people ask about records management
What is Records Management?
Why is Records Management important for compliance?
Which compliance frameworks address Records Management?
Where can I learn more about Records Management?
See how Records Management applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.