Back to all 93 controls
Annex A 5.33
Organizational
A.5.33 Protection of records
Records are protected from loss or tampering.
What good looks like
Retention schedule, secure storage, integrity protection for records.
Evidence an auditor will ask for
Retention policy, immutable storage configs, retention reports.
Put this control into practice
Check whether your organisation already meets Annex A 5.33 with the free Gap Analysis tool, or get implementation-ready templates for every Annex A control with the Document Pack.