ISO/IEC 27031:2011 7.6.2: Control of IRBC documentation
IRBC documentation, including policy, plans and procedures, should be controlled: approved before issue, reviewed and updated, versioned, and available where it is needed with obsolete versions withdrawn.