What is information governance?

What structures, policies, procedures, processes and controls are needed to manage information in the enterprise?

information

Businesses are constantly seeking to ensure they are fully compliant with regulatory demands over data sharing and information governance - especially in light of GDPR, which came into force on 25 May 2018. But beyond this, large organisations are always seeking to improve their data and information governance skills more generally.

Information governance, according to the Data Governance Institute, is a system of decision rights and accountabilities for information-related purposes. The institute says these are "executed according to agreed-upon models, which describe who can take what actions with what information, and when, under what circumstances, using what methods".

This may also offer employees a reliable avenue for dealing with the host of different regulatory and legal hurdles that apply to handling customer or user data. With various pieces of legislation in force simultaneously this could be confusing.

These include The Computer Misuse Act 1990; The Data Protection Act 1998; The Human Rights Act 1998; The Freedom of Information Act 2000; and The Privacy and Electronic Communication Regulations 2003, as well as the GDPR-inspired Data Protection Act 2018.

Important targets

Information governance offers a framework to bring together aspects of data handling into one single, over-arching policy, ensuring it complies with all relevant data laws. This not only makes it easier for employees to access the information they need to run their day-to-day tasks, but it also means the entire organisation is more likely to be compliant.

Advertisement
Advertisement - Article continues below

Information Governance can also help cut costs associated with the collection, management and storage of data, allowing firms to take advantage of low-cost cloud services they perhaps would not have been able to use in the past, because of the sensitivity of the data they hold, for example.

Because the data is already compliant before employees access it, workers are able to use it freely to make better business decisions, ultimately resulting in higher levels of productivity across the entire organisation.

As part of information governance, the company will also need to outline and adhere to their individual data strategies, policies and standards, ensuring everyone in the organisation understands them and is using them as a unified entity. There's no point having policies and strategies if not everyone is using or sticking to them, including management and the board.

Information governance should be the centre of IT strategy and it should be used to dictate how data management projects and services are developed and implemented.

Measuring success

Organisations can measure the success of their information governance efforts against the following:

  • Has the application of information governance practices fixed any outstanding problems that led to its original deployment?
  • Are data standards well-defined and comprehended by users who need to be mindful of them?
  • Is data and information of a superior quality or of better use as a consequence of the modifications made?
  • Do users within an organisation recognise the main parts they play in information governance within their department?

Best practices

When implementing an effective information governance strategy, it is crucial to follow best practices.

Have executive sponsorship the success of information governance within an organisation often;rides on executive sponsorship of the initiative in order for it to remain a priority.

Know your starting point Before you can figure out where your information governance initiative takes you, you need to assess your starting point and incorporate this into your initial governance strategy.

Be realistic Always make sure that your organisation's information governance project has a realistic and achievable starting point. Start small, build up and develop successes to promote information governance to the wider user base.

Advertisement
Advertisement - Article continues below

Have checkpoints with specific milestones, an organisation can check what is and isn't working in order to make changes and ensure the long-term viability and sustainability of the project.

Featured Resources

The IT Pro guide to Windows 10 migration

Everything you need to know for a successful transition

Download now

Managing security risk and compliance in a challenging landscape

How key technology partners grow with your organisation

Download now

Software-defined storage for dummies

Control storage costs, eliminate storage bottlenecks and solve storage management challenges

Download now

6 best practices for escaping ransomware

A complete guide to tackling ransomware attacks

Download now
Advertisement

Most Popular

Visit/security/identity-and-access-management-iam/354289/44-million-microsoft-customers-found-using
identity and access management (IAM)

44 million Microsoft customers found using compromised passwords

6 Dec 2019
Visit/cloud/microsoft-azure/354230/microsoft-not-amazon-is-going-to-win-the-cloud-wars
Microsoft Azure

Microsoft, not Amazon, is going to win the cloud wars

30 Nov 2019
Visit/hardware/354237/five-signs-that-its-time-to-retire-it-kit
Sponsored

Five signs that it’s time to retire IT kit

29 Nov 2019
Visit/business/business-strategy/354195/where-modernisation-and-sustainability-meet-a-tale-of-two
Sponsored

Where modernisation and sustainability meet: A tale of two benefits

25 Nov 2019