1 00:00:00,300 --> 00:00:07,380 So now let us begin with documentation, specification and record, what is the difference between all 2 00:00:07,380 --> 00:00:07,590 this? 3 00:00:08,130 --> 00:00:13,890 Now you can see a big image on the screen, but for the moment, just listen to me now. 4 00:00:13,890 --> 00:00:15,020 What is a document? 5 00:00:15,360 --> 00:00:21,280 A document is an information and the medium on which it is contained. 6 00:00:21,720 --> 00:00:27,900 So basically, a document can be a document, a physical document or an electronic document. 7 00:00:28,380 --> 00:00:31,830 Anything that has information on it is a document. 8 00:00:32,520 --> 00:00:34,590 Well, what is a specification? 9 00:00:35,130 --> 00:00:39,690 A specification is a document stating requirements. 10 00:00:39,690 --> 00:00:42,240 You should have this word fixed in your mind. 11 00:00:42,960 --> 00:00:44,250 Specify this. 12 00:00:44,670 --> 00:00:53,640 A customer submits a specification, which means a customer is submitting a document that has the requirements 13 00:00:54,030 --> 00:00:57,260 that are needed to be fulfilled for the customer. 14 00:00:57,690 --> 00:01:07,590 So specification is a document stating the requirements and a record is a document stating the results 15 00:01:07,590 --> 00:01:10,590 achieved or providing the evidence. 16 00:01:11,100 --> 00:01:12,430 This is very important. 17 00:01:12,450 --> 00:01:18,740 Now we will always see, for the record on the record, different types of records. 18 00:01:19,230 --> 00:01:25,580 So a document stating the results achieved or providing any evidence is a record. 19 00:01:26,100 --> 00:01:34,130 The meeting was scheduled on, let's see, 12th of February at one thirty pm. 20 00:01:34,860 --> 00:01:40,050 So the meeting calendar is the record is a type of a document. 21 00:01:40,440 --> 00:01:47,490 So specification and records are types of documents, but a specification is a document stating the 22 00:01:47,490 --> 00:01:52,800 requirements I record is a document stating the results or the evidence. 23 00:01:53,280 --> 00:02:01,170 So the calendar on your desktop can be the record for the meetings or can meet the evidence stating 24 00:02:01,170 --> 00:02:05,420 that the meetings were taken place or took place. 25 00:02:05,790 --> 00:02:09,810 So that is a difference between a record and a specification. 26 00:02:10,260 --> 00:02:14,610 Now, example of the medium can be the people. 27 00:02:14,880 --> 00:02:23,730 It can be magnetic, electronic or optical computing disk photograph or a master sample or a combination 28 00:02:23,730 --> 00:02:26,100 of different such medium. 29 00:02:26,370 --> 00:02:31,140 But documentation cannot be an audio or video. 30 00:02:31,620 --> 00:02:38,730 Just make just keep sure that just keep in that mind, because most of the time is when you will have 31 00:02:38,730 --> 00:02:40,080 to face this question. 32 00:02:40,530 --> 00:02:47,360 People will ask you whether the video or the audio is a kind of document and the answer is no. 33 00:02:47,970 --> 00:02:51,900 The audio and video do not come on the document. 34 00:02:53,710 --> 00:03:01,810 A set of documents, for example, specification and records together is often known as documentation. 35 00:03:02,560 --> 00:03:08,510 It is important to make the differentiation between documents and records in dictionaries. 36 00:03:08,530 --> 00:03:16,030 A record is a type of a document, but when it comes to information security wall, these are two distinct 37 00:03:16,030 --> 00:03:16,720 concepts. 38 00:03:17,080 --> 00:03:21,740 A record is the output of a process or a control. 39 00:03:22,300 --> 00:03:27,040 For example, let's say an audit procedure is a document, right? 40 00:03:27,850 --> 00:03:33,830 How to carry out the audit procedure is a document, not implementation of this procedure. 41 00:03:33,850 --> 00:03:38,040 That is, the performance of the audit generates an audit report. 42 00:03:38,170 --> 00:03:38,480 Right. 43 00:03:38,560 --> 00:03:44,940 What whatever has been collected or checked throughout the audit it has, that has to be an audit report. 44 00:03:45,190 --> 00:03:51,270 And now that audit report is a kind of document is a record that is a document. 45 00:03:51,280 --> 00:03:59,230 But that document is a record, which means the audit report is a document stating the results of actions. 46 00:04:00,590 --> 00:04:08,240 A document process for management reviews is a document, and this process generates the records such 47 00:04:08,240 --> 00:04:10,160 as management review minutes. 48 00:04:11,240 --> 00:04:18,530 A documentary procedure for continual improvement is a document and a full corrective action form is 49 00:04:18,530 --> 00:04:18,980 a record. 50 00:04:19,900 --> 00:04:25,150 Now, if you are quite confused with these terms, don't worry, because these are the terms when it 51 00:04:25,150 --> 00:04:31,960 comes to ISO auditing, but for the time being, let's remember that document is information and the 52 00:04:31,960 --> 00:04:39,100 medium on which which it is contained and specification is the document that has the requirements and 53 00:04:39,100 --> 00:04:39,670 records. 54 00:04:39,670 --> 00:04:45,250 Is the document that has reserves or the evidence that is it for this lecture. 55 00:04:45,670 --> 00:04:47,110 These are very simple terms. 56 00:04:47,110 --> 00:04:53,760 We are just going through the basic terms of information security and I hope you are on board with me. 57 00:04:54,130 --> 00:04:56,190 I will see you in the next lecture.