ISO 30301:2019

International

vISO 30301:2019, second edition (2019-02) + Amd 1:2024

8 domains

28 controls

Verified

ISO 30301:2019 is a compliance framework from International with 8 domains and 28 controls. The largest domains are Clause 7: Support – ISO 30301:2019 (7 controls), Clause 4: Context of the organization – ISO 30301:2019 (5 controls), Annex A: Operational requirements for records processes, controls and systems – ISO 30301:2019 (3 controls). Every control below carries what it requires and what an assessor expects to see.

Maintained by Gerard Blokdyk

Framework summaries on this platform are interpretations grounded in the published source, for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (8)

Annex A: Operational requirements for records processes, controls and systems – ISO 30301:2019

3 controls

Controls in the Annex A: Operational requirements for records processes, controls and systems – ISO 30301:2019 domain of ISO 30301:2019: 3 controls
Code	Title	Description
iso-30301-2019::A.1	Annex A.1: Records processes	The organization has to operate the records processes its business needs and keep them under control. The annex names th...
iso-30301-2019::A.2	Annex A.2: Records controls	The organization has to put in place the controls that make the records processes consistent across the organization. Th...
iso-30301-2019::A.3	Annex A.3: Records systems	The organization has to provide records systems that keep records authentic, reliable, usable and protected for as long...

Clause 10: Improvement – ISO 30301:2019

2 controls

Controls in the Clause 10: Improvement – ISO 30301:2019 domain of ISO 30301:2019: 2 controls
Code	Title	Description
iso-30301-2019::10.1	Nonconformity and corrective action	When a nonconformity occurs the organization has to react to it, decide whether action is needed to remove the cause so...
iso-30301-2019::10.2	Continual improvement	The organization has to keep improving the suitability, adequacy and effectiveness of the records system. The 2019 editi...

Clause 4: Context of the organization – ISO 30301:2019

5 controls

Controls in the Clause 4: Context of the organization – ISO 30301:2019 domain of ISO 30301:2019: 5 controls
Code	Title	Description
iso-30301-2019::4.1.1	Understanding the organization and its context	The organization has to work out which external and internal issues matter to its purpose and to its ability to reach th...
iso-30301-2019::4.1.2	Records requirements	The organization must identify, assess and document two things: the business need for records, which is the appraisal de...
iso-30301-2019::4.2	Understanding the needs and expectations of interested parties	The organization has to name the interested parties that bear on the records system and decide which of their needs beco...
iso-30301-2019::4.3	Determining the scope of the MSR	The organization must define the boundaries of the records system and state where it applies, then keep that scope avail...
iso-30301-2019::4.4	Management system for records	The organization has to establish, implement, maintain and continually improve the records system, including the process...

Clause 5: Leadership – ISO 30301:2019

3 controls

Controls in the Clause 5: Leadership – ISO 30301:2019 domain of ISO 30301:2019: 3 controls
Code	Title	Description
iso-30301-2019::5.1	Leadership and commitment	Top management has to show leadership and commitment, not merely approve a policy. That means taking accountability for...
iso-30301-2019::5.2	Policy	Top management must establish a records policy and keep it as documented information. The policy has to suit the organiz...
iso-30301-2019::5.3	Organization roles, responsibilities and authorities	Top management must make sure that the responsibilities and authorities for the records roles are assigned and communica...

Clause 6: Planning – ISO 30301:2019

2 controls

Controls in the Clause 6: Planning – ISO 30301:2019 domain of ISO 30301:2019: 2 controls
Code	Title	Description
iso-30301-2019::6.1	Actions to address risks and opportunities	The organization has to consider the issues from 4.1 and the requirements from 4.2, decide which risks and opportunities...
iso-30301-2019::6.2	Records objectives and planning to achieve them	The organization must set records objectives at the functions and levels where work happens. The objectives have to be c...

Clause 7: Support – ISO 30301:2019

7 controls

Controls in the Clause 7: Support – ISO 30301:2019 domain of ISO 30301:2019: 7 controls
Code	Title	Description
iso-30301-2019::7.1	Resources	The organization has to determine what resources the records system needs and provide them. Resources include people wit...
iso-30301-2019::7.2	Competence	The organization must decide what competence is needed for work that affects records performance and the operation of th...
iso-30301-2019::7.3	Awareness	People working under the organization's control have to be aware of the records policy, how their work contributes to th...
iso-30301-2019::7.4	Communication	The organization has to decide what it communicates about the records system, when, with whom and how. That covers inter...
iso-30301-2019::7.5.1	Documented information: general	The records system has to include the documented information the standard requires and any further documented informatio...
iso-30301-2019::7.5.2	Creating and updating documented information	When the organization creates or updates documented information it has to make sure it is identified and described, for...
iso-30301-2019::7.5.3	Control of documented information	Documented information required by the records system and by the standard has to be controlled so that it is available a...

Clause 8: Operation – ISO 30301:2019

3 controls

Controls in the Clause 8: Operation – ISO 30301:2019 domain of ISO 30301:2019: 3 controls
Code	Title	Description
iso-30301-2019::8.1	Operational planning and control	The organization has to plan, implement and control the records processes needed to meet the requirements and to carry o...
iso-30301-2019::8.2	Determining records to be created	For every business process the organization has to analyse and decide what records will be created and captured, when th...
iso-30301-2019::8.3	Designing and implementing records processes, controls and systems	The organization has to design and implement its records processes, controls and systems in line with the records requir...

Clause 9: Performance evaluation – ISO 30301:2019

3 controls

Controls in the Clause 9: Performance evaluation – ISO 30301:2019 domain of ISO 30301:2019: 3 controls
Code	Title	Description
iso-30301-2019::9.1	Monitoring, measurement, analysis and evaluation	The organization has to decide what to monitor and measure, the methods it will use to keep the results valid, when moni...
iso-30301-2019::9.2	Internal audit	The organization has to run internal audits at planned intervals to find out whether the records system conforms to its...
iso-30301-2019::9.3	Management review	Top management has to review the records system at planned intervals to confirm that it remains suitable, adequate and e...

What is ISO 30301:2019 and who does it apply to?

ISO 30301:2019 is a compliance framework from International with 8 domains and 28 controls. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

What does ISO 30301:2019 actually require?

ISO 30301:2019 has 28 controls organised across 8 domains. The largest domains are Clause 7: Support – ISO 30301:2019 (7 controls), Clause 4: Context of the organization – ISO 30301:2019 (5 controls), Annex A: Operational requirements for records processes, controls and systems – ISO 30301:2019 (3 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

If I already comply with another framework, how much of ISO 30301:2019 do I already cover?

ISO 30301:2019 does not currently have cross-framework mappings in our system. Check back as we continuously expand our mapping database.

How do I implement ISO 30301:2019?

Start your ISO 30301:2019 compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about ISO 30301:2019 requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 28 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 1,111 frameworks.

Get Started Free →

Free forever, no credit card required