1 Scope
This Technical Report intends to assist organizations in assessing risks to records processes and systems so they can ensure records continue to meet identified business needs
as long as required.
The report
a) establishes a method of analysis for identifying risks related to records processes and systems,
b) provides a method of analysing the potential effects of adverse events on records processes and systems,
c) provides guidelines for conducting an assessment of risks related to records processes and systems, and
d) provides guidelines for documenting identified and assessed risks in preparation for mitigation.
This Technical Report does not address the general risks to an organization’s operations which can be mitigated by creating records.
This Technical Report can be used by all organizations regardless of size, nature
of their activities, or complexity of their functions and structure. These factors,
and the regulatory regime in which the organization operates which prescribes the
creation and control...