In most organisations, the records management team and the information security teams are separated, primarily because information security is seen as a technology function, and records management is not. But good records management requires effective security management, and good cybersecurity practice relies on appropriate recordkeeping. By considering the ways in which these two domains intersect, we can make the case for closer collaboration, if not connection, between these roles.