ISO 18128:2024

ISO 18128:2024

March 2024
International standard Current

Information and documentation - Records risks - Risk assessment for records management

The document:a)       provides methods for identifying and documenting risks related to records, records processes, controls and systems (records risks);b)       provides techniques for analysing records risks;c)        provides guidelines for conducting an evaluation of records risks.This document intends to assist organizations in assessing records risks so they can ensure records continue to meet identified business needs as long as required.This document can be used by all organizations regardless of size, nature of their activities, or complexity of their functions and structure.This document does not directly address the mitigation of risks, as methods for these vary from organization to organization.It can be used by records professionals or people who have responsibility for records and records processes, controls and/or systems in their organizations, and by auditors or managers who have responsibility for risk management programs in their organizations.

View the extract
Main informations

Collections

International ISO standards

Thematics

Développement durable et RSE, Sécurité, QSE, Management et performance

Publication date

March 2024

Number of pages

27 p.

Reference

ISO 18128:2024

ICS Codes

01.140.20   Information sciences
03.100.01   Company organization and management in general

Print number

1
Sumary
Information and documentation - Records risks - Risk assessment for records management

The document:

a)       provides methods for identifying and documenting risks related to records, records processes, controls and systems (records risks);

b)       provides techniques for analysing records risks;

c)        provides guidelines for conducting an evaluation of records risks.

This document intends to assist organizations in assessing records risks so they can ensure records continue to meet identified business needs as long as required.

This document can be used by all organizations regardless of size, nature of their activities, or complexity of their functions and structure.

This document does not directly address the mitigation of risks, as methods for these vary from organization to organization.

It can be used by records professionals or people who have responsibility for records and records processes, controls and/or systems in their organizations, and by auditors or managers who have responsibility for risk management programs in their organizations.

Replaced standards (1)
ISO/TR 18128:2014
March 2014
Technical report Cancelled
Information and documentation - Risk assessment for records processes and systems

ISO/TR 18128:2014 intends to assist organizations in assessing risks to records processes and systems so they can ensure records continue to meet identified business needs as long as required. ISO/TR 18128:2014: a) establishes a method of analysis for identifying risks related to records processes and systems, b) provides a method of analysing the potential effects of adverse events on records processes and systems, c) provides guidelines for conducting an assessment of risks related to records processes and systems, and d) provides guidelines for documenting identified and assessed risks in preparation for mitigation. ISO/TR 18128:2014 can be used by all organizations regardless of size, nature of their activities, or complexity of their functions and structure. These factors, and the regulatory regime in which the organization operates which prescribes the creation and control of its records, are taken into account when identifying and assessing risk related to records and records systems. ISO/TR 18128:2014 can be used by records professionals or people who have responsibility for records in their organizations and by auditors or managers who have responsibility for risk management programs in their organizations.

Standard replaced by (1)
ISO/TR 18128:2014
March 2014
Technical report Cancelled
Information and documentation - Risk assessment for records processes and systems

ISO/TR 18128:2014 intends to assist organizations in assessing risks to records processes and systems so they can ensure records continue to meet identified business needs as long as required. ISO/TR 18128:2014: a) establishes a method of analysis for identifying risks related to records processes and systems, b) provides a method of analysing the potential effects of adverse events on records processes and systems, c) provides guidelines for conducting an assessment of risks related to records processes and systems, and d) provides guidelines for documenting identified and assessed risks in preparation for mitigation. ISO/TR 18128:2014 can be used by all organizations regardless of size, nature of their activities, or complexity of their functions and structure. These factors, and the regulatory regime in which the organization operates which prescribes the creation and control of its records, are taken into account when identifying and assessing risk related to records and records systems. ISO/TR 18128:2014 can be used by records professionals or people who have responsibility for records in their organizations and by auditors or managers who have responsibility for risk management programs in their organizations.

ZOOM ON ... the Requirements department
To comply with a standard, you need to quickly understand its issues in order to determine its impact on your activity.

The Requirements department helps you quickly locate within the normative text:
- mandatory clauses to satisfy,
- non-essential but useful clauses to know, such as permissions and recommendations.

The identification of these types of clauses is based on the document “ISO / IEC Directives, Part 2 - Principles and rules of structure and drafting of ISO documents ”as well as on a constantly enriched list of verbal forms.

With Requirements, quickly access the main part of the normative text!

With Requirements, quickly access the main part of the normative text!
What is the Redline format?
The Redline + service - standards comparator allows you to easily and simply identify major changes between the current standard and its last canceled version.

At a glance, you will be able to identify the additions, deletions or modifications to a text, table, figure and formula.
At a glance, you will be able to identify the additions, deletions or modifications to a text, table, figure and formula

The Redlines + service is offered to you on the collection of French standards in force, in French language and in HTML and PDF format.

For an overview of the service, click on View a standard in redline format
Need to identify, monitor and decipher standards?

COBAZ is the simple and effective solution to meet the normative needs related to your activity, in France and abroad.

Available by subscription, CObaz is THE modular solution to compose according to your needs today and tomorrow. Quickly discover CObaz!

Request your free, no-obligation live demo

I discover COBAZ