Assess and manage your recordkeeping risk

Risk management is the process of identifying your public authority’s risks, prioritising those risks in accordance with your needs and risk appetite, and deciding how to mitigate those risks.

The risks you need to consider include:

• recordkeeping risks–risks related to your recordkeeping practices (or their absence)
• business activity risks–risks involved in performing your public authority’s work.

It is important that you conduct both types of risk analysis to ensure you have a comprehensive understanding of the risks faced by your public authority.

Assessing and managing your recordkeeping risks are an important part of building or changing your records governance.

Resources and tools

Resources and tools for records management have been developed to help you implement best practice records management in your public authority.