Info Mgmt Data and Information Types

• Controlled Documents - Official policies, critical or high-risk procedures that require careful configuration management
  • Examples: HR/recruiting, onboarding/assessment/shadowing, professional development & promotion
  • Change control: Formal changes are made and approved by a governing body
• Uncontrolled Documents - Procedures and guidance that may change regularly and/or be applied differently depending on the scenario
  • Examples: Manuals, guidance, normal-risk or variable procedures, brochures, content marketing assets
  • Change control: Formal changes can be implemented by one owner
• Controlled Records - Evidence of events that must be tracked and monitored for compliance
  • Examples: Training certificates, 3rd party audit reports, anything that contains personal data
  • Change control: Records may be generated by anyone but are approved and maintained/retained by a process owner
• Uncontrolled Records - Evidence of events but no requirement for being maintained/retained
  • Examples: Meeting minutes, notes, internal audits, surveys, memos, lessons learned
  • Change control: Anyone can create, edit, and delete these resources