BS_10008-2-2020.pdf

BRITISH STANDARDBS10008-2:2020ContentsPageForewordiii0Introduction0.1Management summary0.2Purpose of this British Standard0.3Compliance0.4Information as an asset0.5Technology0.6Management framework0.7Brief history of this British Standard1Scope2Normative references3Terms and definitions4 Context of the organization104.1 General114.2 Issues11Figure 1-Encryption keys14Figure 2-Hierarchy of trust154.3 Requirements154.4Boundaries and applicability155Leadership165.1Leadership and commitment165.2Policy statements165.3Roles and responsibilities of workers5.4Legal and regulatory environment286Planning6.1Actions to address risks and opportunities96.2Objectives and achievements7Support7.1Resources37.2Competence7.3Awareness7.4Reporting and communication7.5Documented information32Operation428.1General428.2Creation428.3Importing428.4Business process management,robotic process automation and workflow systems458.5Document scanning468.6Data extraction478.7Metadata capture488.8Self-modifying files498.9Compound documents498.10ESI in structured databases508.11Blockchain and distributed ledger technologies568.12Version control68.13Storage systems598.14ESI transfer6THE BRITISH STANDARDS INSTITUTION 2020-ALL RIGHTS RESERVED I