ISO 27001 & 22301 / CCTV retention time
what does ISO say about CCTV retention? and how long is it ideal to keep footages per ISO standards
Please select user.
ISO 27001 & ISO 22301 PREMIUM DOCUMENTATION TOOLKIT
Step-by-step implementation for smaller companies.
Find out more
ISO 27001 does not prescribe retention times for records.
To identify the required retention time, you need to consider the results of the risk assessment and applicable legal requirements (e.g., laws, regulations, and contracts).
In case there are no relevant risks or legal requirements defining for how long to keep records such as CCTV images, the organization can adopt the retention time that best fulfills its needs.
For further information see:
HTML tags are not allowed