3.3.1. Records shall be maintained a minimum of XX years [ define actual retention time; should not be less than 3 years due to ISO audit cycle requirements] unless otherwise indicated below or as defined by customer, statutory or regulatory requirements