An organisation must document in its business rules, policies and procedures decisions about what information and records are required. The decisions must also be reflected in specifications for systems and metadata schema. 2.2 areas of An organisation must identify the areas of high risk, high business, and the information or both of its business. An organisation can better and records needed to prioritise how it manages, treats and protects these critical support them, must be systems and the information and records they contain. identified and regularly reviewed. An organisation must identify the likely or potential to information and records management and manage or mitigate them. This includes protecting the systems that manage information and records that are high-risk, high-value, or both, from loss and damage. An organisation should set up appropriate security measures SA/SNZ HB 436:2013 and business continuity strategies and plans. Risk management guidelines – Companion to AS/NZS ISO 31000:2009 By identifying high-value information and records at creation, an organisation can better manage and use this core asset. .govt.nz
An organisation must document in its business rules, policies and procedures decisions about what information and records are required. The decisions must also be reflected in specifications for systems and metadata schema. 2.2 areas of business, and the information and records needed to support them, must be identified and regularly reviewed. An organisation must identify the areas of high risk, high or both of its business. An organisation can better prioritise how it manages, treats and protects these critical systems and the information and records they contain. An organisation must identify the likely or potential to information and records management and manage or mitigate them. This includes protecting the systems that manage information and records that are high-risk, high-value, or both, from loss and damage. An organisation should set up appropriate security measures and business continuity strategies and plans. By identifying high-value information and records at creation, an organisation can better manage and use this core asset. SA/SNZ HB 436:2013 Risk management guidelines – Companion to AS/NZS ISO 31000:2009 .govt.nz
16-G8-Implementation-guide.docx