Records and documents

1. What does „record“ exactly mean? It my opinion in means that: Document that cannot be changed after creation (protocols, test reports, management evaluation). For example: the result of a management review does not change after 3 months.

Answer: Record is a specific type of document with the purpose to evidence an achieved result or a performed activity. So your understanding is almost correct considering that a record cannot be changed after it is approved or accepted, because errors can occur when the record is created, and someone has to verify if all information is complete and correct before the record can be considered valid.

2. Beside during the process of the certification you have „documents“. Documents in my understanding mean:
A Document, which can be changed and from which different revision levels can exist (guideline, QM-manual, process instruction).
Okay, by that let’s take the policy for mobile devices and telework. In your template in section 5 - records: you talk about the „permission for teleworking“. Is that permission by that the signed permission of the employee or the blank permission? In my understanding the „record“ only can be the signed permission, the solid document? Is that correct? If we know about that we can decide on which place the document is stored and under which conditions.

Answer: Considering the previous answer, your understanding is correct, the record referred on section 5 is filled and singed permission, not the blank form.

For further information about record management, please read:
- Records management in ISO 27001 and ISO 22301 https://advisera.com/27001academy/blog/2014/11/24/records-management-in-iso-27001-and-iso-22301/