FAQ 47

In clause 6.2.13, bullet b) it is stated that the inspection body shall ensure that procedures are established and implemented to protect the integrity and security of data. Could you give examples of such procedures?

STANDARD: ISO/IEC 17020  ·  CLAUSE: Clause 6.2.13  ·  TOPIC: Facilities and Equipment


Procedures for protecting the integrity and security of data may include:
– Backup practices and frequencies
– Actions to effectively restore data from backup
– The maintenance of virus protection
– The maintenance of password protection
– Protection of data collected on-site
– Protection of ICT tools to carry out inspection
– Encryption of data
– Protection and access control of internally stored inspection records and reports
– Protection of electronically issued inspection reports