Industry regulations Jurisdictional regulations Legal defensibility Legal frameworks Legal research

Transcription

1 A Dutis, Tsks, n Stps Mnging Informtion Risk n Complin 1 Monitor lgl n rgultory lnsp Engg with lgl prtmnt n othr stkholrs Intify n intrprt xisting pplil lws of ll jurisitions n rgultions Intify rsours for urrnt vlopmnt Doumnt rlvnt lws n rgultions Estlish rgulr rviw pross Knowlg Inustry rgultions Jurisitionl rgultions Lgl fnsiility Lgl frmworks Lgl rsrh 2 Intify intrnl n xtrnl omplin rquirmnts Invstigt inustry prtis Bnhmrking mthos Rviw usinss prtis Businss prtis Collort with intrnl stkholrs Culturl prtis Inustry prtis Rgionl iffrns Conut nhmrking 3 Prpr risk profil Collort n onsult with stkholrs Orgniztionl knowlg Intify mngmnt's viw of ptl Risk nlysis mthos risks Risk mngmnt Evlut n oumnt risk tolrns Crt risk profil oumnt Otin stkholr signoff 4 Conut risk ssssmnt Intify risk ssssmnt mthoology Risk ssssmnt mthos Intify stkholrs Sujt mttr knowlg of th usinss r Intify n ollt rsours Dvlop intrviw mtrils Intrviw n ollt t Skills, Ailitis, n Attriuts Anlytil Rsrh Stkholr spifi ommunition Anlytil Communition Culturl snsitivity Ntworking Rsrh Survying Anlytil Communition Intrviwing Prsnttion Survying Anlytil Businss pross nlysis Communition Intrviwing Tools, Equipmnt, n Rsours Intrnt Lgl fnsiility Rsrh srvis Susription srvis Bnhmrking tools Profssionl ssoitions n inustry groups Rsrh srvis Intrnt Prsnttion softwr Risk ssssmnt stnrs, mols n tools Softwr

2 Dutis, Tsks, n Stps Knowlg Skills, Ailitis, n Attriuts f Anlyz n rviw risk ssssmnt t Prsnttion g Prpr risk ssssmnt rport h Otin risk ssssmnt rport signoff(s) 5 Dvlop risk n omplin mtris Dfin risk mitigtion n omplin suss Cost nfit nlysis Intify msurmnt mthoology Msurmnt mthoologis Intify non-omplin triggrs Orgniztionl knowlg Conut ongoing gp nlysis Sttistil nlysis Doumnt mtris f g Prsnt mtris to stkholrs Otin signoff of mtris 6 Crt th mitigtion pln Conut ost nfit nlysis Businss pross Prioritiz risks to mitigt mngmnt Cost nfit nlysis Dvlop mthoology for mitigtion of risks f Communit mitigtion pln to stkholrs Provi implmnttion ssistn Monitor implmnttion of mitigtion pln 7 Mng th risk mitigtion pross Monitor n upt mtris Businss pross Rspon to nomlis mngmnt Cost nfit nlysis Communit with stkholrs Insur vs. uninsur risks Moify risk mitigtion progrm s n Anlytil Communition Communition Aility to rspon unr prssur Communition Tools, Equipmnt, n Rsours Risk ssssmnt stnrs, mols n tools Softwr Risk ssssmnt stnrs, mols n tools Softwr Risk ssssmnt stnrs, mols n tools Softwr 8 Conut risk n omplin uit Dvlop th uit frmwork Auit mthoology Aility to ssss n Intify rsours for uit nlyz ontrt trms with rgr to Assign uit rsponsiilitis Auit stnrs, mols n tools

3 B Skills, Ailitis, n Dutis, Tsks, n Stps Knowlg Attriuts Ovrs th prformn of th uit IG rquirmnts Anlyz rsults of th uit Anlytil Prsnt uit finings n rommntions Communition f to stkholrs Prsnttion Upt risk mitigtion pln s on uit g finings Dvloping IG Strtgi Pln 1 Align rsours to vlop pln Otin xutiv sponsorship Informtion govrnn Intify stkholrs Informtion mngmnt (.g., rors, privy, surity) IT govrnn Rsour mngmnt Strtgi plnning Intify rols n rsponsiilitis 2 Anlyz intrnl rivrs Inorport ntrpris strtgi pln into IG pln Inorport IT strtgy into IG pln Inorport usinss plns into IG pln, to mximiz usinss opportunity through govrnn fforts. Inorport orport ultur into IG pln Inorport orport risk tolrns into IG pln f Inorport ost nfit nlysis into IG pln Informtion govrnn Informtion mngmnt (.g., rors, privy, surity) IT govrnn Rsour mngmnt Strtgi plnning Communition Communition Intrviwing Rltionship uiling Tools, Equipmnt, n Rsours Informtion govrnn stnrs, mols n tools (.g., th Prinipls, ISO 15489, CAN/CGSB ) Orgniztion's oprtionl pln Orgniztion's strtgi pln Orgniztion's vision, org hrt, vlus, mission, gols, ugt Businss r strtgi n oprtionl plns Orgniztion's oprtionl pln Orgniztion's strtgi pln Orgniztion's vision, org hrt, vlus, mission, gols, ugt

4 Dutis, Tsks, n Stps Knowlg g Rviw othr onstrints (.g., finnil, tim, lgl) 3 Anlyz xtrnl rivrs n trns Intify thnology trns Businss prtis Intify informtion n t trns (.g., Culturl prtis informtion typs n nw t formts) Finnil nlysis n Intify xtrnl pnnis plnning Evlut onomi nvironmnt/onitions Inustry prtis Inustry rgultions Evlut politil nvironmnt Jurisitionl rgultions f Evlut lgl n rgultory nvironmnt(s) Lgl frmworks g Intify inustry st prtis n trns Rgionl iffrns h Evlut omptitiv lnsp 4 Dvlop strtgi pln Dfin strtgis s upon ollt Continuous improvmnt informtion Critil suss ftors Prioritiz strtgis Environmntl snning Align gols to strtgis mthoologis Intify inititivs to hiv gols Strtgi plnning Dfin ritil suss ftors f Dfin msurmnts for suss g Writ th strtgi pln h Rviw with stkholrs i Otin pprovl for strtgi pln Skills, Ailitis, n Attriuts Tools, Equipmnt, n Rsours Softwr Trn nlysis Profssionl ssoitions n inustry groups Rsrh srvis Susription srvis Anlytil Communition Continuous improvmnt Critil thinking Disrnmnt n jugmnt Environmntl snning Softwr Stnrs, mthos n tools for strtgi plnning j Rgulrly rviw n upt pln s n C Dvloping IG Frmwork 1 Conut u ilign to intify stnrs to gui th IG frmwork Evlut xtrnl stnrs, guilins, Informtion mngmnt thnil rports, st prtis stnrs Anlytil Communition Ky Inustry stnrs 1 1 Rfr Ky Inustry Stnrs list on pg 7

5 Dutis, Tsks, n Stps Evlut intrnl polis, stnrs, guilins, thnil rports, st prtis Slt stnrs, guilins, thnil rports, st prtis to inform th frmwork Doumnt th sltion pross Rviw n vrify sltion with stkholrs Knowlg Informtion thnology stnrs Lgl fnsiility Poliy vlopmnt stnrs 2 Estlish ntrpris IG poliis n stnrs Dfin isrt poliis n stnrs Informtion prsrvtion Vlit ginst orgniztionl gols n n rhivs ojtivs Lgl fnsiility Drft intrnl poliis n stnrs Orgniztionl gols n ojtivs Rviw rft oumnts with stkholrs Poliy vlopmnt stnrs Otin pprovl n signoff Rors n informtion mngmnt (RIM) 3 Dvlop uthority, rols n rsponsiilitis Dfin uthority, rols n rsponsiilitis Authoritis, rols n Assss rol rquirmnts rsponsiilitis Lgl fnsiility Rviw rols with stkholrs Otin rol ssignmnt pprovl from xutiv stkholr(s) Orgniztionl strutur Skills, Ailitis, n Attriuts Disrnmnt n jugmnt Communition Disrnmnt n jugmnt Ngotition Rltionship uiling Thnil writing Trust uiling Communition Ngotition Trust uiling Tools, Equipmnt, n Rsours Profssionl vlopmnt Glossry of trms Ky Inustry stnrs Poliy vlopmnt guilins Profssionl ssoitions n inustry groups Thnil writing guilins Humn Rsours poliis n prours Assign uthority, rols n rsponsiilitis 4 Dvlop ommunitions n trining Intify ommunition uins Chng mngmnt Lgl fnsiility Drft ommunitions Mngmnt thory n prti Prsonnl mngmnt Communition Disrnmnt n jugmnt Ngotition Trining rsours (3r prty) Trining softwr Trining stnrs, mols n tools

6 D Dutis, Tsks, n Stps Knowlg Trining n lrning mthoologis 5 Dvlop uiting n nformnt mhnisms for th frmwork Estlish uiting ritri n mtris Estlish nformnt mhnisms Auiting Lgl fnsiility Orgniztion strutur n ultur Estlishing th IG Progrm 1 Estlish progrm sop, mnt n rporting Engg xutiv lrship n stlish primry n sonry orgniztionl strutur Dfin th IG progrm mnt n sop Estlish pproprit funing n rsours Estlish ongoing xutiv rporting Otin xutiv mngmnt signoff Bugting Orgniztion ynmis Orgniztion strutur n ultur Skills, Ailitis, n Attriuts Rltionship uiling Anlytil Communition Bugting Communition Disrnmnt n jugmnt Ngotition Prsnttion Tools, Equipmnt, n Rsours Humn Rsours poliis n prours Orgniztionl hrts Profssionl vlopmnt Progrm nhmrks 2 Assign ountilitis Intify IG progrm rols n rsponsiilitis Mngmnt thory n prti Prsonnl mngmnt Assign IG progrm rols n rsponsiilitis 3 Implmnt th IG progrm Dvlop ommunition pln for th IG progrm Implmnt hng mngmnt pln for th IG progrm Chng mngmnt Mngmnt thory n prti Prsonnl mngmnt Bugting Communition Disrnmnt n jugmnt Ngotition Communition Disrnmnt n jugmnt Ngotition Humn rsours Jo sriptions Profssionl ssoitions n inustry groups Profssionl vlopmnt Susription srvis Trining rsours (3r prty) Trining softwr Trining stnrs,

7 Dutis, Tsks, n Stps Knowlg Provi trining of ssign rsours 4 Mng th IG progrm Monitor option of th IG progrm Evlut fftivnss of IG progrm Trining n lrning mthoologis Mngmnt thory n prti Mtris n sttistil nlysis Prformn mngmnt Prsonnl mngmnt Skills, Ailitis, n Attriuts Rltionship uiling Communition Disrnmnt n jugmnt Ngotition Prsonnl mngmnt Prsnttion Rltionship uiling Tools, Equipmnt, n Rsours mols n tools Humn rsours Inustry groups Profssionl ssoitions Profssionl vlopmnt Softwr Evlut n lign rsours Rport to mngmnt E Estlishing IG Businss Intgrtion n Ovrsight 1 Dfin urrnt stt of usinss prosss Intrviw usinss rs Businss pross Rviw urrnt usinss nvironmnt (.g., ultur, systms, prosss) Intify informtion ns of th usinss Doumnt urrnt nvironmnt n sir stt mngmnt mthoologis Orgniztion strutur n ultur Rors n informtion mngmnt (RIM) Businss pross nlysis n mpping Disrnmnt n jugmnt Intrviwing Rltionship uiling Tt Ky Inustry stnrs Softwr

8 Dutis, Tsks, n Stps Knowlg 2 Dfin urrnt stt of thnology us in usinss pross Intify usinss n thnology stkholrs n usrs Survy n intrviw thnology stkholrs n usrs Collt n nlyz t Intify gps Arss gps through rsponsil hnnl Bnhmrking Businss pross mngmnt Eltroni informtion mngmnt prinipls n prtis Dt rpositoris n ssoit lssifition shms (.g., mtt, txonomy, ontology) IT oprtions n tools IT voulry n onpts Orgniztion strutur n ultur Rors n informtion mngmnt (RIM) Skills, Ailitis, n Attriuts Businss pross nlysis n mpping Disrnmnt n jugmnt Intrviwing Rltionship uiling Tt Tools, Equipmnt, n Rsours Bnhmrking tools Businss nlysis stnrs, mols n tools Hrwr n pplition invntory Ntwork rwlr tools Ntwork usg nlysis tools 3 Align IG frmwork with usinss r rquirmnts Rviw strtgi gols of th ntrpris Businss n IT voulry Rviw strtgi gols of th usinss r(s) Collort with h usinss r to vlop IG frmwork Rviw n pprov h usinss r IG frmwork Drft til hng mngmnt pross s rquir 4 Gui informtion mngmnt isions n onpts Businss r gols n ojtivs Businss pross nlysis Eltroni informtion mngmnt prinipls n prtis Entrpris gols n ojtivs IG prinipls n prtis IT oprtions n tools Orgniztion strutur n ultur Businss pross nlysis Communition Disrnmnt n jugmnt Intrviwing Rltionship uiling Tt Businss nlysis stnrs, mols n tools Businss r strtgi plns, org hrts, SOPs Ky Inustry stnrs

9 Dutis, Tsks, n Stps Knowlg Dvlop n ongoing prtiiption pross Dvlop n ongoing pprovl pross Implmnt th prtiiption n pprovl pross Businss n IT voulry n onpts Businss r gols n ojtivs Businss pross nlysis Eltroni informtion mngmnt prinipls n prtis Entrpris gols n ojtivs IG prinipls n prtis IT oprtions n tools Orgniztion strutur n ultur Rors n informtion mngmnt (RIM) Businss r prourmnt n vlopmnt prosss Skills, Ailitis, n Attriuts Businss pross nlysis Collortion Communition Disrnmnt n jugmnt Intrviwing Rltionship uiling Tt Tools, Equipmnt, n Rsours Businss nlysis stnrs, mols n tools Businss r strtgi plns, org hrts, SOPs Ky Inustry stnrs F Aligning Thnology with th IG frmwork 1 Intify how thnology is us in th usinss f g h i Rviw IT, informtion sst invntory or rgistr, rhittur n strtgi pln Rviw thnology option Rviw kup strtgy Rviw isstr rovry strtgy Rviw surity strtgy Rviw privy strtgy Rviw informtion moility strtgy Rviw informtion storg prtis (hr opy, igitl, miroforms) Rviw us of vnors n outsouring Eltroni informtion mngmnt prinipls n prtis IT govrnn IT oprtions n tools IT rols n rsponsiilitis IT voulry n onpts IT storg mtris n prformn improvmnts Anlytil Communition Disrnmnt n jugmnt Intrviwing Rltionship uiling Trn nlysis Profssionl n tr ssoitions Rsrh srvis Susription srvis Thnology stnrs, mols n tools

10 j k l m Dutis, Tsks, n Stps Knowlg throughout informtion govrnn prtis Rviw xisting poliis prtining to informtion Rviw ltroni ommunitions strtgis Rviw hlp sk strtgy Rviw thnology outsouring strtgy Rviw ontnt rtntion n isposition n strtgy Rviw igitl prsrvtion plns to nsur t qulity through intgrtion of nw o thnologis to nhn usinss oprtions (.g., mstr t mngmnt, mtt mngmnt) 2 Monitor n vlut thnology trns Rviw gnrl thnology trns in th mrkts (.g., lou omputing, soil mi) Evlut gnrl thnology trns for IG implitions Rviw IG implitions with stkholrs in orn with IG frmwork Rviw thnology trns spifi to IG in th mrkts (.g., ror/ontnt mngmnt pplitions, vloping stnrs, t isovry, storg, nw t formts Prtiipt in th vlution of IG spifi thnologis Rviw IG spifi thnologis with f stkholrs in orn with IG frmwork Eltroni informtion mngmnt prinipls n prtis IT oprtions n tools IT voulry n onpts Thnology inustry 3 Evlut hrwr, softwr n t lif yls Rviw IT prourmnt prours Dt migrtion prosss Inorport informtion govrnn rquirmnts to IT prourmnt pross Dommissioning prosss Skills, Ailitis, n Attriuts Anlytil Communition Disrnmnt n jugmnt Rltionship uiling Trn nlysis Anlytil Communition Dision mking Tools, Equipmnt, n Rsours Profssionl n tr ssoitions Rsrh srvis Susription srvis Thnology stnrs, mols n tools IG frmwork IG stnrs, mols n tools

11 Dutis, Tsks, n Stps Knowlg Inorport informtion govrnn rquirmnts to IT vlopmnt pross Inorport informtion govrnn rquirmnts into systm rtirmnt n t migrtion prosss Inorport informtion govrnn rquirmnts to ommissioning pross IT vlopmnt pross IT prourmnt prours 4 Align IG strtgi pln n frmwork with th IT strtgy n oprtions Rviw gols of IT orgniztion Eltroni informtion Assss n nlyz IT gols Collort with IT to vlop strtgy to inorport informtion govrnn rquirmnts into xisting systms Collort with IT to inorport IG rquirmnts into lgy systms Collort with IT to ssist in systm upgr n rplmnt strtgy mngmnt prinipls n prtis Eltronilly stor informtion (ESI) rquirmnts Finnil moling TCO (Totl Cost of Ownrship) IG prinipls n prtis IT oprtions n tools IT voulry n onpts Privy n surity Strutur n unstrutur systms Thnology inustry Skills, Ailitis, n Attriuts Ngotition Prsusion Anlytil Businss rltionship uiling Finnil Ngotition Strtgi thinking Tools, Equipmnt, n Rsours Rsrh srvis Susription srvis Thnology stnrs, mols n tools IG frmwork IG stnrs, mols n tools IG strtgi pln IT strtgi pln n oprtionl plns Ky Inustry stnrs