.png)
We are delighted to announce a significant milestone in the development of ISO/DIS 18128 - Information and documentation - Records risks - Risk assessment for records management. The standard has successfully advanced to stage 40.99 and is now approved for registration as a Final Draft International Standard (FDIS).
About ISO/DIS 18128: ISO/DIS 18128 is designed to assist organizations in systematically assessing records risks, ensuring that records continue to meet identified business needs for the required duration. The International Standard encompasses the following key aspects:
a) Identification and Documentation: Provides methods for identifying and documenting risks related to records, records processes, controls, and systems.
b) Risk Analysis Techniques: Offers techniques for analyzing records risks comprehensively.
c) Guidelines for Evaluation: Provides guidelines for conducting an evaluation of records risks.
Applicability: This International Standard is versatile and can be employed by organizations of all sizes, irrespective of the nature of their activities or the complexity of their functions and structures. The regulatory regime within which an organization operates, influencing the creation and control of its records, is also considered in the risk identification and assessment process.
Scope and Considerations: The standard recognizes the diverse structures of contemporary government and corporate entities, including complex partnerships, contractual arrangements for outsourcing services, and intricate supply chains. It emphasizes the importance of identifying the boundaries of the organization as the initial step in defining the scope of the records risk assessment project.
Users: ISO/DIS 18128 is a valuable tool for records professionals, individuals with responsibility for records within organizations, as well as auditors and managers overseeing risk management programs.
Mitigation of Risks: While ISO/DIS 18128 focuses on the assessment of records risks, it does not directly address the mitigation of risks, recognizing that methods for mitigation will vary across organizations.
This announcement marks a significant achievement in the development of international standards for records management. We encourage all relevant stakeholders to familiarize themselves with the content of ISO/DIS 18128 and consider its adoption to enhance their records management practices.