Good morning,

Has anyone gone through information classification (clean desk policy) for the ISO27001 standard certification?

I have questions about keeping an "information inventory".  Our Data Security guy wanted me to include all information (which would be non-record and record) on the current record retention schedules and label the non-records as "NR"  - but I disagree - I'm not going to list "non-records" on a record retention schedule.

If you have gone through this - how are you recording your "non-record information"?

Thank you,
Jeanne

Jeanne M. Callen
Records Management Leader | J. J. Keller & Associates, Inc.
3003 Breezewood Lane | PO Box 368 | Neenah, WI 54957-0368
*: 920.722.2848 Ext. 2849| *: [log in to unmask]<mailto:[log in to unmask]> |*: jjkeller.com





This electronic communication may contain confidential information. If you, the reader of this electronic communication, are not the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this electronic communication, or any of its contents, is strictly prohibited. If you believe you have received this electronic communication in error, please notify the sender as soon as possible and delete the original version of this electronic communication, any of its contents (including attachments), and any copies of the foregoing from your computer system. Your assistance in correcting this error is appreciated.

List archives at http://lists.ufl.edu/archives/recmgmt-l.html
Contact [log in to unmask] for assistance
To unsubscribe from this list, click the below link. If not already present, place UNSUBSCRIBE RECMGMT-L or UNSUB RECMGMT-L in the body of the message.
mailto:[log in to unmask]