Documentation & Records

• Maintain an Incident Register with full details of all incidents, actions taken, and outcomes.

• Retain records securely for at least 6 years (aligned with FCA and GDPR).