Skip to content

Glossary · Foundations

Documented Information

The records and documents an ISO management system requires to be created, controlled, and maintained as evidence.

Put the term into practice: Risk management software

Documented information is the ISO term covering both documents, such as policies and procedures, and records, such as audit reports and meeting minutes. Standards specify which information must be documented and that it be controlled, meaning versioned, protected, and available where needed.

Good control of documented information is what lets an organisation prove, during an audit, that its management system is not just designed but actually operating.

In KaitoSec everyone works with the same terms.

Security, IT and leadership share terms, data and evidence in one system. We show you in thirty minutes.