Information and Documentation – Records Management, is the practice of effective controls for the creation, receipt, maintenance, use, and disposition of records and documentation, in all formats.
The moment that the auditor receives audit documentation from their clients, they immediately take on the responsibilities as a data custodian to manage and control the risk of a data loss or breach to as minimal as possible, and must comply with the Records Management policies and measures for the organization that is providing the audit documentation.