process of ensuring that recorded information is properly stored, managed, and tracked according to an organization's policies
