Discussion 1:
In order to interpret the Information Governance Reference Model (IGRM) diagram. It is recommended that we start from the outside of the diagram.
Don't use plagiarized sources. Get Your Custom Essay on
Discussion
Just from $13/Page
Briefly name three (3) components required to successfully conceive a complex set of inter-operable processes and implementable procedures and structural elements.
Discussion 2 :
In chapter seven (7), we have learned from “The Path to Information Value” that Seventy percent of managers and executives say data are “extremely important” for creating competitive advantage.
In addition, it is implied by the authors that, “The key, of course, is knowing which data matter, who within a company needs them, and finding ways to get that data into users’ hands.”
Looking at the Economist Intelligence Unit report, identify the three (3) phases that led to the yard’s rebirth.
ITS 833 – INFORMATION GOVERNANCE
Chapter 6
Information Governance policy development
Dr. Omar Mohamed
Copyright @ Omar Mohamed 20
1
9
1
1
CHAPTER GOALS AND OBJECTIVES
Know the 8 Generally Accepted Recordkeeping Principles®
What is the IG Reference Model?
What does the IGRM Diagram consist of?
What are the best practice considerations?
What is the benefits and risks of having standards?
What are the key standards relevant to IG
Copyright @ Omar Mohamed 2019
2
2
A Review of the 8 Generally Accepted
Recording Keeping Principles®
Accountability
Transparency
Integrity
Protection
Compliance
Availability
Retention
Disposition
So…what is the significance of these principles?
Copyright @ Omar Mohamed 2019
3
3
IG REFERENCE MODEL
Who?
ARMA International & CGOC
When?
2012
Where?
As part of the EDRM Project Version 3.0
Why?
To foster the adoption by facilitating communication and collaboration between IG stakeholder functions, legal, records management, risk management, and business unit stakeholders.
Copyright @ Omar Mohamed 2019
4
4
HOW TO INTERPRET THE IGRM DIAGRAM
Outer Ring: Complex set of interoperable processes and implementing he procedures and structural element to put them into practice
Requirements:
Understanding of business imperatives
Knowledge of appropriate tools and infrastructure
Sensitivity to legal and regulatory obligations
Inner Ring: Depicts a work-flow (life-cycle) diagram. Shows that information management is important at all stages of the lifecycle
Copyright @ Omar Mohamed 2019
5
5
How the IGRM Diagram related to the
Generally Accepted Recordkeeping Principles®
Support the ARMA Principle by identifying the cross-functional groups of IG stakeholders
Depicts the intersecting objectives of the organization
Depicts the relationship duty, value and information assets
Used by proactive organizations as an introspective lens to facilitate visualization, understanding and discussion concerning how to apple the “Principles” to the organization.
Puts focus on the “Principles”
Provides essential context for the maturity model
Copyright @ Omar Mohamed 2019
6
6
Considerations in IG Policy Formation
Best Practices?
YES!
Understand that Best Practices will vary per organization
Review 25 generic Best Practices, Pages 75 and 76 of text book
Copyright @ Omar Mohamed 2019
7
Standards?
YES!
Two types to consider
De Jure Standards – Legal standards published by standards setting bodies such as IOS, ANSI, NIST, BTS and others
De Facto Standards – Informal standards regarded by many as actual standards – arising through popular use (Example: Windows in the business world in 2001-2010). May be published by formal standards setting bodies without having “Formal” status
7
Benefits and Risks of Standards
Benefits
Quality Assurance Support
Interoperability Support
Implementation Framework and Certification Checklists
Cost Reduction
International Consensus
Copyright @ Omar Mohamed 2019
8
Risks
Possible Decreased Flexibility
Standards Confusion
Real-World Shortcomings to due Theoretical Basis
Cost and Maintenance Involving in Updating Standard
8
KEY STANDARDS RELEVANT TO IG
Risk Management
ISO 31000-2009 – States principles and generic guidelines of risk management applicable to IG
Provides a structured framework for development and implementation of risk management strategies and programs
“Risk Management Framework”: Set of two basic components (foundations and organizational arrangements) that support and sustain risk management throughout the organization.
Copyright @ Omar Mohamed 2019
9
9
KEY STANDARDS RELEVANT TO IG
Information Security Management
ISO/IEC 27001:2005- Information Security Management System Standard that provides guidance in development of security controls for protection of information assets
Flexible –can be applied to different activities and processes
Includes use of standards by auditors and stakeholders
ISO/IEC 27002:2005-Information Technology-Security Techniques-Code of Practice for Information Security
Establishes guidelines and general principle for initiating, implementing, maintaining and improving information security mgt.
Includes Best Practices of Control Objectives in 11 key areas of information security management
ISO/IE 38500:2008 –International Standard for high-level principle and guidance for senior executives and directors, and advisors for effective and efficient use of IT
Three major sections
Scope, Application and Objectives
Framework for Good Corporate Governance of IT
Guidance for Corporate Governance of IT
Copyright @ Omar Mohamed 2019
10
10
KEY STANDARDS RELEVANT TO IG
RECORDS AND E-RECORDS MANAGEMENT
ISO 15489-1:2001 and ISO 15489-2:2001– International Standard for Records Management
Part 1:Provides a framework and high-level overview of RM core principles
Part 1:Defines RM as “Field of management responsibility for the efficient and systematic control of creation receipt, maintenance, use and disposition of records, including processes for capturing and maintaining evidence of and information about business activities and transactions in the form of records”1
Part 2: Technical Specifications and Methodology for implementing standard
ISO 30300;2011 – Information and Documentation-Management Systems for Records-Fundamentals and Vocabulary
ISO 30301:2011 – Information and Documentation-Management Systems for Records – Requirements
1ISO 15489-1:2001 Information and Documentation-Records Management, Part 1:General Geneva: ISO, 2001), section 3.16.
Copyright @ Omar Mohamed 2019
11
11
NATIONAL, INTERNATIONAL AND REGIONAL ERM STANDARDS
United States E-Records Standard
U.S. DOD 5015.2 Design Criteria Standard For Electronic Records Management Software Applications
Developed in 1997
Updated in 2002 and 2007
Canadian Standards
Electronic Records as Documentary Evidence CAN/CGSB-72.34-2005
Microfilm and Electronic Images as Documentary Evidence CAN/DGSB-72.11-93
Canadian Legal Considerations
Relies on prime directive-that an organization shall always be prepared to produce its records as evidence- and its national standards, for the admissibility of electronic records in court proceedings
The admissibility of records as evidence is determined under the business records provisions of the Evidence Act
Copyright @ Omar Mohamed 2019
12
12
NATIONAL, INTERNATIONAL AND REGIONAL ERM STANDARDS…CONTINUED
United Kingdom
The National Archives
To sets of functions requirements to promote the development of the electronic records management software market (one in 1999 and one in 2002)
Model Requirements of Electronic Records
MoReq2
MoReq2010
Australian ERM and Records Management Standards
Has consistently been world leader in this area
Adopted all three parts of ISO 16175 as its e-records standard
Australian Government Recordkeeping Metadata Standard Version 2.0
Australian Government Locator Service
AS 5090:2003 – Work Process Analysis for Recordkeeping
Copyright @ Omar Mohamed 2019
13
13
LONG-TERM DIGITAL PRESERVATION
Referred to as “LTDP”
LTDP is a key area for IG policy development
Frequently not addressed in an IG plan
Should be applied in preserving historical and “vital records” and in order to maintain its corporate or organizational memory
Key Standards for LTDP:
PDF/A-2 –official standard format for preserving electronic documents, developed by Adobe.
ISO 19005-1:2005 Document Management is the published specification requiring PDF format
ISO 14721:2012 – Space Data and Information Transfer Systems –Open Archival Information Systems
ISO TR 18492(2005) – Long Term Preservation of Electronic Document Based Information
ISO 16363:2012 – Space Data and Information Transfer Systems-Audit and Certification of Trustworthy Digital Repositories
Copyright @ Omar Mohamed 2019
14
14
BUSINESS CONTINUITY MANAGEMENT
ISO 22301:2012 – Societal Security – Business Continuity Management Systems Requirements
Specifies requirements for creating and implementing a standardized approach to business continuity management —– this is also known as Disaster Recovery
Benefits of ISO 22301
Threat Identification and Assessment
Threat and Recovery Planning
Mission-critical process protection
Stakeholder Confidence
Copyright @ Omar Mohamed 2019
15
15
THINGS TO REMEMBER IN DEVELOPING THE IG POLICY
Take into account organizational goals
Draw clear lines of authority
Make sure you have an executive sponsor who can garner executive support for the IG program and policies
IG program must contain communications and training component
Stakeholders must be made aware of new policies and practices
Make sure you have metrics that are relevant and useful and can actually be measured
Test and audit
Give feedback to employees based upon metrics, tests and audit results
Establish and enforce clear penalties for policy violations and communicate that to employees
Take into account organizational culture
Copyright @ Omar Mohamed 2019
16
16
The End
Copyright @ Omar Mohamed 2019
17
17
ITS 833 – INFORMATION GOVERNANCE
Chapter 7
Dr. Omar Mohamed
Copyright @ Omar Mohamed 20
1
9
1
1
Chapter Goals and Objectives
What is the difference between structured
What is the difference between unstructured and semi-structured information?
Why is unstructured data so challenging?
Copyright @ Omar Mohamed 2019
2
Generally, what is full cost accounting (FCA)?
What are the 10 key factors that drive the total cost of ownership of unstructured data
How can we better manage information?
How would an IG enabled organization look different from one that is not IG enabled?
2
The Business Case for
Information Governance
Difficult to Justify
Short term return on investment is nonexistent
Long term view is essential
Reduce exposure to risk over time
Improve quality and security of information
Streamlining information retention
Looking at Information Costs differently
Copyright @ Omar Mohamed 2019
3
3
The information environment
Challenges of Unstructured Information
Data volumes are growing
“Unstructured Information” is growing at a dramatic rate
Challenges unique to unstructured information
Horizontal nature
Lack of formality
Management location
Identification of ownership
Classification
Copyright @ Omar Mohamed 2019
4
Calculating Information Costs
Rising Storage Costs (Short sighted thinking)
Labor (particularly knowledge workers)
Overhead costs
Costs of e-discovery and litigation
Opportunity Costs
4
Full Cost Accounting for
Information Models
Total Cost of Ownership (TCO) Model
Return on Investment Model (ROI)
Full Cost Accounting Model (FCA)
Past, Present, Future Costs
Direct Costs
Indirect Costs
Flexible Application
Triple Bottom Line Accounting – Monetary, Environment, Societal Costs
Copyright @ Omar Mohamed 2019
5
Full Cost Accounting
General and Administrative Costs
Productivity Gains and Losses
Legal and E-discovery costs
Indirect Costs
Up-Front Costs
Future Costs
5
The politics involved
Tools needed to establish facts about the information environment
SOURCES OF Costs of owning unstructured information, cost reducers, and cost enhancers
Giving unstructured information value
The IG enabled organization
The End
Copyright @ Omar Mohamed 2019
11
11
