ISO/PRF 18128

Information and documentation — Records risks — Risk assessment for records management

This International Standard intends to assist organizations in assessing records risks so they can ensure records continue to meet identified business needs as long as required. The International Standard a) provides methods for identifying and documenting risks related to records, records processes, controls and systems; b) provides techniques for analysing records risks; c) provides guidelines for conducting an evaluation of records risks. This International Standard can be used by all organizations regardless of size, nature of their activities, or complexity of their functions and structure. These factors, and the regulatory regime in which the organization operates, which prescribes the creation and control of its records, are taken into account when identifying and assessing records risk. Defining an organization or identifying its boundaries should take into account the complex structures and partnerships and contractual arrangements for outsourcing services and supply chains which are a common feature of contemporary government and corporate entities. Identifying the boundaries of the organization is the initial step in defining the scope of the project of records risk assessment. This International Standard does not address directly the mitigation of risks, as methods for these will vary from organization to organization. It can be used by records professionals or people who have responsibility for records in their organizations, and by auditors or managers who have responsibility for risk management programs in their organizations.

Titre manque

General Information

• Status: Not Published
• ICS: 01.140.20 - Information sciences
• ICS: 03.100.01 - Company organization and management in general
• Technical Committee: ISO/TC 46/SC 11 - Archives/records management
• Drafting Committee: ISO/TC 46/SC 11 - Archives/records management
• Current Stage: 5020 - FDIS ballot initiated: 2 months. Proof sent to secretariat
• Completion Date: 05-Feb-2024

Relations

• Revises: ISO/TR 18128:2014 - Information and documentation — Risk assessment for records processes and systems
• Effective Date: 10-Dec-2022

Standards Content (Sample)

International
Standard
ISO 18128
First edition
Information and documentation —
Records risks — Risk assessment
for records management
PROOF/ÉPREUVE
Reference number
ISO 18128:2024(en) © ISO 2024

---------------------- Page: 1 ----------------------
ISO 18128:2024(en)
COPYRIGHT PROTECTED DOCUMENT
© ISO 2024
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on
the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below
or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: [phone]
Email: [e-mail]
Website: www.iso.org
Published in Switzerland
PROOF/ÉPREUVE
© ISO 2024 – All rights reserved
ii

---------------------- Page: 2 ----------------------
ISO 18128:2024(en)
Contents Page
Foreword .iv
Introduction .v
1 Scope . 1
2 Normative references . 1
3 Terms and definitions . 1
3.1 Terms specific to risk . .2
3.2 Terms specific to records .2
4 Core concepts . . 3
4.1 Issues and concerns about uncertainty .3
5 Determining scope, context and criteria . 4
5.1 General .4
5.2 Defining the scope .4
5.3 External and internal context .5
5.3.1 General .5
5.3.2 External context .5
5.3.3 Internal context .5
5.4 Definition of records risk criteria.5
5.5 Risk description .6
6 Uses of risk assessment techniques .
...

Style Definition
ISO/DISPRF 18128:2023(E) .
Formatted: Font: 14 pt, Bold, English (United Kingdom)
ISO /TC 46/SC 11 N
Formatted: Left: 1.5 cm, Right: 1.5 cm, Section start:
New page, Width: 21 cm, Height: 29.7 cm, Header
Date: 2023-02-20
distance from edge: 1.27 cm, Footer distance from
edge: 1.27 cm
Secretariat: SA
Formatted
...
Date: 2024-02-04
Formatted: zzCover large
Formatted
...
Formatted: Space Before: 0 pt, Adjust space between
Latin and Asian text, Adjust space between Asian text
and numbers
Formatted: Cover Title_A1, Adjust space between Latin
Information and documentation — Records risks — Risk assessment
and Asian text, Adjust space between Asian text and
for records management
numbers
PROOF

---------------------- Page: 1 ----------------------
ISO/DISPRF 18128:2023(E2024(en)
Formatted: HeaderCentered
© ISO 20232024
Formatted: Font color: Auto, English (United Kingdom)
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication
Formatted: Font color: Auto, English (United Kingdom)
may be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying,
or posting on the internet or an intranet, without prior written permission. Permission can be requested from either ISO
at the address below or ISO'sISO’s member body in the country of the requester.
Formatted: Font color: Auto, English (United Kingdom)
ISO Copyright Office copyright office
Formatted: Font color: Auto, English (United Kingdom)
CP 401 • Ch. de Blandonnet 8
Formatted: zzCopyright address
CH-1214 Vernier, Geneva
Phone: + 41 22 749 01 11
Formatted: Font color: Auto, English (United Kingdom)
Formatted: Font color: Auto, English (United Kingdom)
Email: [e-mail]
E-mail: [e-mail] Formatted: zzCopyright address
Website: www.iso.orgwww.iso.org
Formatted: Font color: Auto, French (Switzerland)
Formatted: French (Switzerland)
Published in Switzerland.
Formatted: Font color: Auto, French (Switzerland)
Formatted: zzCopyright address
Formatted: Font color: Auto, French (Switzerland)
Formatted: Font color: Auto, English (United Kingdom)
Formatted: English (United Kingdom)
Formatted: FooterPageRomanNumber
ii © ISO 2023 – All rights reserved
© ISO 2024 – All rights reserved

ii

---------------------- Page: 2 ----------------------
ISO/DISPRF 18128:2023(E2024(en)
Formatted: HeaderCentered, Left
Contents Page
Foreword . vi
Introduction . vii
1 Scope . 1
2 Normative references . 1
3 Terms and definitions . 1
3.1 Terms specific to risk . 1
3.2 Terms specific to records. 2
4 Core concepts . 3
4.1 Issues and concerns about uncertainty . 3
5 Determining scope, context and criteria . 4
5.1 General . 4
5.2 Defining the scope . 4
5.3 External and internal context . 5
5.3.1 General . 5
5.3.2 External context . 5
...