Guest user Created: Jan 12, 2016 Last commented: Jan 12, 2016

Managing records

Related to the section Managing records kept on the basis of this document, currently in our organization; all emails, requirement documents, design documents etc related to a particular project are stored under the particular folder and only the members of the project have access to it. Is this this good enough to specify?

0 0

Assign topic to the user

Select user

Guest

DejanK Jan 12, 2016

Answer: I'm not sure what exactly would you like to specify in this procedure, but ISO 27001 requires you to specify how the records are stored and protected, how the changes are controlled, how long they are kept, how are they disposed of, etc. - our Procedure for Document and Record Control suggests that all these requirements are described in other policies and procedures which require the creation of certain records.

Quote

0 0

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Jan 12, 2016

Expert Advice Community