GxP records and data are retained for the defined retention period in a form that keeps their content and meaning, including electronic signatures, audit trails and other metadata, and archiving and retrieval processes move records to secure storage where they are safe from being reached, changed or erased without authority or by accident, and remain readily retrievable for business and regulatory purposes. The archiving approach is considered at system design, roles and procedures are defined, archived records are checked initially and periodically for accessibility, durability, readability and completeness, and archiving is distinguished from backup, as detailed in Appendix O13.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.