BS ISO 18128:2024

Information and documentation. Records risks. Risk assessment for records management. | Status: Current

1 Scope The document:

1. a) provides methods for identifying and documenting risks related to records, records processes, controls and systems (recordsrisks);
2. b) provides techniques for analysing recordsrisks;
3. c) provides guidelines for conducting an evaluation of recordsrisks.

This document intends to assist organizations in assessing recordsrisks so they can ensure records continue to meet identified business needs as long as required. This document can be used by all organizations regardless of size, nature of their activities, or complexity of their functions and structure. This document does not directly address the mitigation of risks, as methods for these vary from organization to organization. It can be used by records professionals or people who have responsibility for records and records processes, controls and/or systems in their organizations, and by auditors or managers who have responsibility for risk management programs in their organizations.