Information and Records management pertains to the practice of maintaining the records of an organization from the time they are created up to their eventual disposal. This may include classifying, storing, securing, archival preservation, and destruction of records. Whether physical or digital, maintaining proper internal controls over the records is a critical aspect of the information and records management industry. Some controls include privacy, data protection, availability, and physical & logical security. Sometimes, laws or regulations (e.g. HIPAA, SOX, etc.) require personal information and records to be properly controlled. An SSAE 16 can provide key stakeholders the comfort they need in your internal controls.