ISO/TR 18128-2014 pdf free.Information and documentation — Risk assessment for records processesand systems.
1.Scope:This Technical Reportintends to assist organizations in assessing risksto records processes andsystemsso they can ensure records continue to meet identified business needs as long as required.The report
a) establishes a method of analysis for identifying risks related to records processes and systems,b) provides a method of analysing the potential effects of adverse events on records processes and systems,
c)provides guidelines for conducting an assessment of risks related to records processes and systems, and
d) provides guidelines for documenting identified and assessed risks in preparation for mitigation.This Technical Report does not address the general risks to an organization’s operations which can bemitigated by creating records.
This Technical Report can be used by all organizations regardless of size, nature of their activities,or complexity of their functions and structure. These factors, and the regulatory regime in which theorganization operates which prescribes the creation and control of its records, are taken into accountwhen identifying and assessing risk related to records and records systems.
Defining an organization or identifying its boundaries should take into account the complex structuresand partnerships and contractual arrangements for outsourcing services and supply chains which are acommon feature of contemporary government and corporate entities.Identifying the boundaries of theorganization is the initial step in defining the scope of the project of risk assessment related to records.This Technical Report does not address directly the mitigation of risks as methods for these will varyfrom organization to organization.
The Technical Report can be used by records professionals or people who have responsibility for recordsin their organizations and by auditors or managers who have responsibility for risk managementprograms in their organizations.
2.Normative references:The following documents, in whole or in part, are normatively referenced in this document and areindispensable for its application. For dated references, only the edition cited applies. For undatedreferences, the latest edition of the referenced document (including any amendments) applies.ISO/TR 18128 pdf download.