Policy template content

Track name                                        [List of authorized persons to access documents]
Storage location                               With the information itself, at the place where the degree of secrecy is indicated
Responsible person for storage     Information resource owner
How to protect records                   In the same way that information is protected
Storage time                                      The list must exist for the duration of the information itself

Track name  – what does the track refer to?

Example: The price in the contract or the whole contract? A record in database or entire database?

Answer: The track name refers to the name by which the record is known in the organization. For example, for contracts you may use as track name the word "contract"to refer to any type of contract, the expression "customers contracts", to refer to contracts related only to customers, or the expression "service contracts" to refer to contracts related to services provided by your organization. This definition is up to each organization depending on how it refers to its information.

These materials will also help you regarding control of documents:
- Records management in ISO 27001 and ISO 22301 https://advisera.com/27001academy/blog/2014/11/24/records-management-in-iso-27001-and-iso-22301/

- Book Secure & Simple: A Small-Business Guide to Implementing ISO 27001 On Your Own https://advisera.com/books/secure-and-simple-a-small-business-guide-to-implementing-iso-27001-on-your-own/
- Free online training ISO 27001 Foundations Course https://advisera.com/training/iso-27001-foundations-course/