Overview
Reference MAP of ISO Standards and Implementation below:

ISO 17799
This standard is called the Information Security Program Standards. Retention of information not only requires storage but it requires security. If you cannot ensure that the information you are storing as a record, whether it be for 1 month or 7 years, is secure and unaltered from the day it was archived then there is not much point to having an archiving or retention program in place.
The standard has multiple components to it including; Conduct Risk Assessments, Establish a Security Policy, Compile an Asset Inventory, Define Accountability, Address Physical Security, Document Operating Procedures, Determine Access Controls, Coordinate Business Continuity, Demonstrate Compliance
All of which form a ring of security around the information that you are storing. Information security has often been referred to as an onion, it has layers. As with anything, if those layers are not checked on a regular basis (conduct risk assessments) then a security breach can compromise your archives. Likewise, the ability to Demonstrate Compliance means that you need to have complete audit trails to prove that the information stored has not been modified in the 3, 5, 7 or even 13 years that it has been archived. In the later case, storing a hash value with the archived document can be a handy tool to show that the original document has not been altered. A hash value is a mathematical calculation that identifies the contents of the stored document as a unique number.
ISO 15836 – is the Dublin Core Initiative which was started in 1995 and whose goal is to improve discovery standards for information resources. You can think of the Dublin Core as the guide for the digital tourist. The information stored with each document helps our tourist find and locate the information that they are looking for. This set of meta data is applicable to both the new employee that is burdened with finding past information related to their position as well as the new employee 20 years from now that needs to understand past decisions so as not to repeat the same work but build on past work. The Dublin Core metadata element set that deals with Meta Data Standards Consists of 15 Elements (tags); Description, Publisher, Contributor, Date, Title , Creator, Subject, Type, Format, Identifier, Source, Language, Relation, Coverage, Rights.
ISO 19005-1 discusses the long-term preservation of electronic documents. This standard is the basis for the PDF/A File Format and provides a framework for the Context and History of a Document. Standard outlines How a reader should display information, Technical Requirements .File Structure, Graphics, Fonts and Transparency, Annotations, Meta Data and Logical Structure
ISO 15489 The Standard for Records Management. The regulatory environment consists of: Statute and case laws, and regulations, sector-specific, specific to records, archives, access, privacy, evidence, electronic commerce, data protection and information, Mandatory standards of practice, Voluntary codes of best practice
Cmis Standard (OASIS). Provides a standard method for access to a Repository. Standard Repository access provides for multiple ECM systems to operate within an organization. ISO 14721, The OAIS (Open Archival Information System) standard, which presents models describing digital preservation features and functions
ISO 23081 This standard relates to Information and Documentation for Records management processes. In other words, Metadata for records. Records Management Meta Data is used to Identify, Authenticate, Contextualize records, and the people, processes and systems that Create, Manage, Maintain and use them and the policies that govern them
Organizations need to make decisions on which of the metadata requirements outlined in this Technical Specifications they will use.
Metadata supports the business and records management processes by protecting records as evidence and ensuring their accessibility, and usability through time, facilitating the ability to understand records, ensuring the evidential value of records, ensure the authenticity, reliability and integrity of records, managing access, privacy and rights, efficient retrieval, interoperability strategies providing logical links between records and the context of their creation identification of the technological environment efficient and successful migration of records from one environment or computer platform to another
Records management metadata
Specifications for Metadata are necessary in any or all organizational systems. The choice of what metadata will be included will be dependent on
- business needs,
- the regulatory environment, and
- Risks affecting business operations.
Different views and perspectives on records management metadata are possible and may coexist. These include
- the business view,
- the records management view
- The use view within or outside the records creating business context, Each of these components must be balanced so that when disposition of a record is to occur the Records Manager has all the necessary information available to them to process the disposition.
ISO/TR 18492:2005 This standard Provides practical methodological guidance for the long-term preservation and retrieval of authentic electronic document-based information. Key Sections of this standard are Section 5, 6 and 7 which discuss the Long-Term Preservation Objectives of your long term archival strategy, Metadata renewal and migration of electronic documents and what the long term preservation strategy for the organization will be.
It should be noted that while the “computer” age is about 50 years old, it’s really only in the last 20 years that the exponential proliferation of information has occurred. However, we have somewhat of a luxury that during this period many programs that we use today were in existence 20 years ago and those programs can read the old information. While many program formats have been lost there do exist conversion utilities that will bring many of those formats forward to today’s standards. So therein lays the rub, the older information formats can be brought forward to today’s standards, but they are no longer in their original “record” format. So at the point of conversion are they still a record? I think that the argument can be made that the new copy is no longer a representation of the original record and therefore that record is lost (assuming that the original program no longer exists).
This example is why long term preservation strategies are critical to the organization. The preservation of corporate records that originate from Office type documents is easy compared to the multimedia / multi format documents that are starting to proliferate in the organization.
ISO 9001 This standard has 4 tiers of required documentation in ISO 9000; Quality Policy Manual, Procedures, Work Instructions and Record Keeping. The procedures and record keeping sections must contain information regarding records retention and disposition in order to be compliant with the requirements in ISO 9000. This requires that procedures be kept for the organizations major processes as well as records are kept of critical operations. The important take away from this ISO standard is the documentation and procedure for how records are disposed of. A record that has existed in an organization for 7 or 13 plus years is not always going to have the luxury of individuals with institutional knowledge to determine if the record is still of value.
In relation to long term preservation of records and record disposition this standard is important not only for marking records, but for determining if it is the correct time to dispose of records. The disposition process must be rigorously enforced so that proper sign-offs are carried out and that disposition is carried out according to a standard corporate process.