Back to Frameworks

ISO 15489-1:2016

International (ISO/TC 46/SC 11)
v2016 (second edition, April 2016)
6 domains
36 controls

Records management guidance: five principles, the characteristics of authoritative records and records systems, policy and responsibility, appraisal, records controls (metadata, classification, access, disposition) and the processes from creation to disposition.

Verified

ISO 15489-1:2016 is a compliance framework from International (ISO/TC 46/SC 11) with 6 domains and 36 controls. The largest domains are Clause 5: Records and records systems – ISO 15489-1:2016 (12 controls), Clause 9: Processes for creating, capturing and managing records – ISO 15489-1:2016 (9 controls), Clause 7: Appraisal – ISO 15489-1:2016 (5 controls). Every control below carries what it requires and what an assessor expects to see.

Maintained by Gerard Blokdyk

Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (6)

Clause 4: Principles for managing records – ISO 15489-1:2016

1 controls
Controls in the Clause 4: Principles for managing records – ISO 15489-1:2016 domain of ISO 15489-1:2016 — 1 controls
CodeTitle
iso-15489-1-2016::44 Principles for managing records

Clause 5: Records and records systems – ISO 15489-1:2016

12 controls
Controls in the Clause 5: Records and records systems – ISO 15489-1:2016 domain of ISO 15489-1:2016 — 12 controls
CodeTitle
iso-15489-1-2016::5.15.1 Records as evidence and information assets
iso-15489-1-2016::5.2.2.15.2.2.1 Authenticity
iso-15489-1-2016::5.2.2.25.2.2.2 Reliability
iso-15489-1-2016::5.2.2.35.2.2.3 Integrity
iso-15489-1-2016::5.2.2.45.2.2.4 Useability
iso-15489-1-2016::5.2.35.2.3 Metadata for records
iso-15489-1-2016::5.3.15.3.1 Records systems: design objectives
iso-15489-1-2016::5.3.2.15.3.2.1 Reliable records systems
iso-15489-1-2016::5.3.2.25.3.2.2 Secure records systems
iso-15489-1-2016::5.3.2.35.3.2.3 Compliant records systems
iso-15489-1-2016::5.3.2.45.3.2.4 Comprehensive records systems
iso-15489-1-2016::5.3.2.55.3.2.5 Systematic records systems

Clause 6: Policies and responsibilities – ISO 15489-1:2016

4 controls
Controls in the Clause 6: Policies and responsibilities – ISO 15489-1:2016 domain of ISO 15489-1:2016 — 4 controls
CodeTitle
iso-15489-1-2016::6.26.2 Policies
iso-15489-1-2016::6.36.3 Responsibilities
iso-15489-1-2016::6.46.4 Monitoring and evaluation
iso-15489-1-2016::6.56.5 Competence and training

Clause 7: Appraisal – ISO 15489-1:2016

5 controls
Controls in the Clause 7: Appraisal – ISO 15489-1:2016 domain of ISO 15489-1:2016 — 5 controls
CodeTitle
iso-15489-1-2016::7.17.1 Appraisal: general
iso-15489-1-2016::7.27.2 Scope of appraisal
iso-15489-1-2016::7.37.3 Understanding the business
iso-15489-1-2016::7.47.4 Determining records requirements
iso-15489-1-2016::7.57.5 Implementing records requirements

Clause 8: Records controls – ISO 15489-1:2016

5 controls
Controls in the Clause 8: Records controls – ISO 15489-1:2016 domain of ISO 15489-1:2016 — 5 controls
CodeTitle
iso-15489-1-2016::8.18.1 Records controls: general
iso-15489-1-2016::8.28.2 Metadata schemas for records
iso-15489-1-2016::8.38.3 Business classification schemes
iso-15489-1-2016::8.48.4 Access and permissions rules
iso-15489-1-2016::8.58.5 Disposition authorities

Clause 9: Processes for creating, capturing and managing records – ISO 15489-1:2016

9 controls
Controls in the Clause 9: Processes for creating, capturing and managing records – ISO 15489-1:2016 domain of ISO 15489-1:2016 — 9 controls
CodeTitle
iso-15489-1-2016::9.19.1 Records processes: general
iso-15489-1-2016::9.29.2 Creating records
iso-15489-1-2016::9.39.3 Capturing records
iso-15489-1-2016::9.49.4 Records classification and indexing
iso-15489-1-2016::9.59.5 Access control
iso-15489-1-2016::9.69.6 Storing records
iso-15489-1-2016::9.79.7 Use and reuse
iso-15489-1-2016::9.89.8 Migrating and converting records
iso-15489-1-2016::9.99.9 Disposition

What is ISO 15489-1:2016 and who does it apply to?

ISO 15489-1:2016 is a compliance framework from International (ISO/TC 46/SC 11) with 6 domains and 36 controls. Records management guidance: five principles, the characteristics of authoritative records and records systems, policy and responsibility, appraisal, records controls (metadata, classification, access, disposition) and the processes from creation to disposition. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

What does ISO 15489-1:2016 actually require?

ISO 15489-1:2016 has 36 controls organised across 6 domains. The largest domains are Clause 5: Records and records systems – ISO 15489-1:2016 (12 controls), Clause 9: Processes for creating, capturing and managing records – ISO 15489-1:2016 (9 controls), Clause 7: Appraisal – ISO 15489-1:2016 (5 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

If I already comply with another framework, how much of ISO 15489-1:2016 do I already cover?

ISO 15489-1:2016 does not currently have cross-framework mappings in our system. Check back as we continuously expand our mapping database.

How do I implement ISO 15489-1:2016?

Start your ISO 15489-1:2016 compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about ISO 15489-1:2016 requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 36 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 894 frameworks.

Get Started Free →

Free forever — no credit card required