The document:


a)       provides methods for identifying and documenting risks related to records, records processes, controls and systems (records risks);


b)       provides techniques for analysing records risks;


c)        provides guidelines for conducting an evaluation of records risks.


This document intends to assist organizations in assessing records risks so they can ensure records continue to meet identified business needs as long as required.


This document can be used by all organizations regardless of size, nature of their activities, or complexity of their functions and structure.


This document does not directly address the mitigation of risks, as methods for these vary from organization to organization.


It can be used by records professionals or people who have responsibility for records and records processes, controls and/or systems in their organizations, and by auditors or managers who have responsibility for risk management programs in their organizations.