ISO/TR 18128:2014
Withdrawn
A Withdrawn Standard is one, which is removed from sale, and its unique number can no longer be used. The Standard can be withdrawn and not replaced, or it can be withdrawn and replaced by a Standard with a different number.
View Superseded by
Information and documentation — Risk assessment for records processes and systems
Hardcopy , PDF
English, French
03-03-2014
09-04-2025
ISO/TR 18128:2014 intends to assist organizations in assessing risks to records processes and systems so they can ensure records continue to meet identified business needs as long as required.
ISO/TR 18128:2014:
a) establishes a method of analysis for identifying risks related to records processes and systems,
b) provides a method of analysing the potential effects of adverse events on records processes and systems,
c) provides guidelines for conducting an assessment of risks related to records processes and systems, and
d) provides guidelines for documenting identified and assessed risks in preparation for mitigation.
ISO/TR 18128:2014 can be used by all organizations regardless of size, nature of their activities, or complexity of their functions and structure. These factors, and the regulatory regime in which the organization operates which prescribes the creation and control of its records, are taken into account when identifying and assessing risk related to records and records systems.
ISO/TR 18128:2014 can be used by records professionals or people who have responsibility for records in their organizations and by auditors or managers who have responsibility for risk management programs in their organizations.
| Committee |
ISO/TC 46/SC 11
|
| DocumentType |
Technical Report
|
| Pages |
37
|
| ProductNote |
THIS STANDARD ALSO REFERS TO ISO 27001
|
| PublisherName |
International Organization for Standardization
|
| Status |
Withdrawn
|
| SupersededBy |
| Standards | Relationship |
| NEN NPR ISO/TR 18128 : 2014 | Identical |
| PD ISO/TR 18128:2014 | Identical |
| FD ISO/TR 18128 : 2014 FD | Identical |
| SA/SNZ TR 18128:2015 | Identical |
| UNE-ISO/TR 18128:2014 IN | Identical |
| ISO 15489-1:2016 | Information and documentation — Records management — Part 1: Concepts and principles |
| BS ISO 15489-1:2016 | Information and documentation. Records management Concepts and principles |
| ISO/TR 15801:2017 | Document management — Electronically stored information — Recommendations for trustworthiness and reliability |
| BS ISO 30302:2015 | Information and documentation. Management systems for records. Guidelines for implementation |
| 15/30298890 DC : 0 | BS ISO 15489-1 - INFORMATION AND DOCUMENTATION - RECORDS MANAGEMENT - PART 1: CONCEPTS AND PRINCIPLES |
| 17/30354853 DC : 0 | BS ISO 19475-3 - DOCUMENT MANAGEMENT APPLICATIONS - MINIMUM REQUIREMENTS FOR THE STORAGE OF DOCUMENTS - PART 3: DISPOSAL |
| PD ISO/TR 15801:2017 | Document management. Electronically stored information. Recommendations for trustworthiness and reliability |
| ISO 30302:2015 | Information and documentation — Management systems for records — Guidelines for implementation |
| 14/30298663 DC : 0 | BS ISO 30302 - INFORMATION AND DOCUMENTATION - MANAGEMENT SYSTEMS FOR RECORDS - GUIDELINES FOR IMPLEMENTATION |
| NS-ISO 16175-1:2020 | Information and documentation - Processes and functional requirements for software for managing records - Part 1: Functional requirements and associated guidance for any applications that manage digital records |
| UNE-ISO 30302:2015 | Information and documentation. Management systems for records. Guidelines for implementation |
| UNE-ISO 15489-1:2016 | Information and documentation. Records management . Part 1: General. |
| ISO/TR 23081-3:2011 | Information and documentation — Managing metadata for records — Part 3: Self-assessment method |
| ISO/IEC 27001:2013 | Information technology — Security techniques — Information security management systems — Requirements |
| ISO 30300:2011 | Information and documentation — Management systems for records — Fundamentals and vocabulary |
| ISO 31000:2009 | Risk management — Principles and guidelines |
| SA/SNZ TR ISO 21965:2020 | Information and documentation - Records management in enterprise architecture |
| ISO/TR 15489-2:2001 | Information and documentation — Records management — Part 2: Guidelines |
| ISO/IEC 27005:2011 | Information technology — Security techniques — Information security risk management |
| ISO 23081-1:2017 | Information and documentation — Records management processes — Metadata for records — Part 1: Principles |
| SA/SNZ TR ISO 21946:2020 | Information and documentation - Appraisal for managing records |
| ISO 15489-1:2016 | Information and documentation — Records management — Part 1: Concepts and principles |
| AS/NZS ISO 16175.1:2021 | Information and documentation - Processes and functional requirements for software for managing records Functional requirements and associated guidance for any applications that manage digital records |
| ISO 23081-2:2009 | Information and documentation — Managing metadata for records — Part 2: Conceptual and implementation issues |
| ISO Guide 73:2009 | Risk management — Vocabulary |
Access your standards online with a subscription
-
Simple online access to standards, technical information and regulations.
-
Critical updates of standards and customisable alerts and notifications.
-
Multi-user online standards collection: secure, flexible and cost effective.