Question about documents

1. Most incoming documents, contracts, etc would be online. However, if they were to be paper only, how do we handle these?  Can we just scan?

 If you do not have any relevant risk or legal requirement preventing you to have this documentation only in electronic format, then you can scan them and use only an online version.

For further information about handling paper documents, see:

• Why is ISO 27001 applicable also for paper-based information? https://advisera.com/27001academy/blog/2019/01/21/why-is-iso-27001-applicable-also-for-paper-based-information/

2. Also, what if an employee were to print a document?  Should we note that they are responsible for ensuring they are always referring to the latest version and that they must shred when a new one is available?

Considering that your main document environment is electronic when there is a need to print a document, common practices are:

• if this document is for temporary use only (e.g., for a couple of days, to be sent to external parties, etc.), it should be identified as a non controlled copy
• if the document must be available for use in the workplace, it must have a responsible person identified for it, that has the responsibility to ensure the printed document is always in the current version and that obsolete versions are properly disposed of, or identified as obsolete if there is a need to keep such versions.

This material will also help you regarding document management:

• Managing ISO Documentation: A Plain English Guide https://advisera.com/books/managing-iso-documentation-plain-english-guide/