| File Reference : | P-90 Records Management Policy |
| Date File Updated | 28-09-26 |
| File Format | MS Word |
| No. of files | 1 |
| Category | Policies | Tags: ISO 27001, records management policy, records retention, information classification |
Included in the alphaZ subscription
Every alphaZ document and toolkit, with updates as they are released. Everything you download is yours to keep.
A records management policy template covering filing, classification and labelling, confidential records, personal data, retention and secure disposal.
This policy template is supplied in fully editable MS Word format and can be easily customised and edited. The document uses pre-defined style formatting throughout, with all text in Calibri font for improved readability.
The following document labelling is included in the footer:
- Policy number and title
- Information-classification
- Version
- Page number / total pages
Further guidance on records:
Download this policy template with your company name and logo already added!
Document Preparation is included with the alphaZ subscription.
This file is included in the alphaZ subscription. This policy is also included in the ISO 27001 Toolkit and every alphaZ ISO toolkit that covers ISO 27001, so the toolkit route gives you this file plus everything else you need in one download.
If you'd like this policy prepared for your organisation along with the rest of your company policies, or help with your information security risk assessment and treatment plan, our remote support services provide direct expert input from our team, by the day, by project, or on an ongoing basis.
Records Management Policy Template
A records management policy template committing to an effective system for managing records, safeguarding them from accidental modification, deletion or loss, and maintaining their confidentiality, integrity and availability.
The policy has Approved By and Date Approved fields and carries a Public information classification, so it can be shared with workers, clients and other interested parties.
What the Records Management Policy Covers
- What records are - the completed forms, files and other documents, paper or electronic, that show what has been done
- Filing - records filed in line with the documented procedure, with ongoing checks that they are filed correctly
- Classification and labelling - identifying protected records and keeping them adequately protected
- Confidential records - protected at all times under the information security and data protection procedures
- Personal data - kept controlled and secure and not disclosed unless authorised
- Paper filing - organised and indexed, with confidential documents in locked filing cabinets when not in use
- Retention - records kept only as long as needed for business purposes or required by law or contract
- Disposal - secure disposal, such as shredding confidential paper and permanently deleting electronic records
Written to Be Shared
Like every alphaZ policy, this is written as a public policy statement that can be shared openly with workers, customers, suppliers and assessors. The internal detail of how it is carried out belongs in your procedures.
Using the Policy
Add your company name and logo, check each commitment matches what your organisation does and edit any that do not, then approve and date the policy and share it with workers and anyone else who needs to see it.
Who Needs a Records Management Policy?
Organisations working to ISO 27001 or ISO 9001, and any organisation that wants a clear statement on how its records are kept, protected and disposed of.
Included in the ISO 27001 Toolkit
This policy is part of the ISO 27001 Toolkit and every alphaZ ISO toolkit that covers ISO 27001.
Works with the Records Procedure
The PP-1-08 Management Files Documents Records Policy Procedure sets out the procedure, records can be listed on the F-IMS201 Records Register, and the TT-1-08 Management of Files, Documents and Records toolbox talk briefs workers.
Document Control
The footer carries the policy number and title, information classification, version and page numbers, and the approval fields record who approved the policy and when, so it can be controlled with the rest of your management system documents and listed on a document register such as the F-IMS20 Document Register.
Related Policies
- P-91 Data Retention Policy - data retention
- P-31 Information Protection Policy - information protection
- P-23 Clear Desk Screen Policy - clear desk and clear screen
- P-25 Data Protection Policy - data protection
Would you rather we prepared it for you?
Our Company Forms, Policies and HR Reset service prepares your policy set, staff handbook and HR forms as one branded set, tailored to how you actually run things.
