Records of the appropriate qualifications are required to provide objective evidence. In order to avoidduplication and because of confidentiality and data protection considerations, this International Standard doesnot require these records to be kept in the risk management file.