BS ISO 30301:2011 pdf free download Information and documentation — Management systems for records — Requirements
1 Scope
This International Standard specifies requirements to be met by a MSR in order to support an organization inthe achievement of its mandate,mission,strategy and goals. lt addresses the development andimplementation of a records policy and objectives and gives information on measuring and monitoringperformance.
A MSR can be established by an organization or across organizations that share business activities.Throughout this International Standard, the term “organization” is not limited to one organization but alsoincludes other organizational structures.
This International Standard is applicable to any organization that wishes to:a) establish, implement, maintain and improve a MSR to support its business;b)assure itself of conformity with its stated records policy;
c)demonstrate conformity with this International Standard by
1) undertaking a self-assessment and self-declaration, or
2)seeking confirmation of its self-declaration by a party external to the organization, or3seeking certification of its MSR by an external party.
This International Standard can be implemented with other Management System Standards(MSS). lt isespecially useful to demonstrate compliance with the documentation and records requirements of other MSs.
2Normative references
The following referenced documents are indispensable for the application of this document. For datedreferencesonly the edition cited applies. For undated references,,the latest edition of the referenceddocument (including any amendments) applies.
ISO 30300,Information and documentation — Management systems for records — Fundamentals andvocabulary
3 Terms and definitions
For the purposes of this document, the terms and definitions given in lSO 30300 apply.
4Context of the organization
4.1Understanding of the organization and its context
When establishing and reviewing its MSR, an organization shall take into account all external and internalfactors that are relevant.
The external and internal factors identified and taken into account when establishing and reviewing the MSRshall be documented.
Understanding the organization’s external context may include, but is not limited to:
a) the social and cultural,legal,regulatory,financial,technological,economic,natural and competitiveenvironment, whether international, national, regional or local;
b) key drivers and trends which can have an impact on the objectives of the organization;c)relationships with, and perceptions, values and expectations of, external stakeholders.Understanding the organization’s internal context may include,but is not limited to:
1) governance, organizational structure, roles and accountabilities;
2)policies, objectives and the strategies that are in place to achieve them;
3) capabilities, understood in terms of resources and knowledge (e.g. capital, time, people,processes,
systems and technologies);
4)information systems, information flows and decision making processes (both formal and informal);5)relationships with, and perceptions and values of,internal stakeholders and the organization’s
culture;
6)standards, guidelines and models adopted by the organization;7) the form and extent of contractual relationships.
4.2Business, legal and other requirements
When establishing and reviewing its records objectives, an organization shall take into account the business,legal, regulatory and other requirements related to the creation and control of records.
The organization shall assess and document business, legal, regulatory and other requirements affecting itsbusiness operations with which it shall comply and for which it requires evidence of compliance.
Business requirements include all the requirements for the proper performance of the operations or businessof the organization.Requirements arise from current business performance, future planning and development,risk management and business continuity planning.
Legal requirements include requirements related to the creation and control of records. Sources of legalrequirements are:
a) statute and case law, including law and regulations governing the sector-specific and general business
environment;