ISO27k ISMS mandatory documentation checklists

Retain records for as long as you might need to refer back to them, preferably neatly filed in sufficient number that the auditors can sample and check a reasonable quantity if they so choose – but don’t go overboard. Piling everything up ‘forever’ in an enormous heap … ................
................