# Clause 7.5: Documented information

Hold the documented information the BCMS depends on, create and update it to a defined standard, and control it throughout its life.

Cloud: Provider evidence ages quickly. Attestations, test reports and contract schedules all have versions, and an auditor will ask which version supported the decision you made.

Evidence: Document register covering BCMS documentation; Defined creation, update and approval route; Access, retention and disposition rules in force.

Test: List the provider documents you rely on, with version and retrieval date.

Citation: ISO 22301:2019, clause 7.5. Source: https://compliance.theartofservice.com/frameworks/iso-22301-2019. Last updated: 2026-10-20.