ARMA: Information Governance: A Revenue Source Potential

Similar documents
Electronic Records Management

How the Information Governance Reference Model (IGRM) Complements ARMA International s Generally Accepted Recordkeeping Principles (GARP )

Information Governance

Generally Accepted Recordkeeping Principles

Generally Accepted Recordkeeping Principles How Does Your Program Measure Up?


Breaking Down the Silos: A 21st Century Approach to Information Governance. May 2015

Non-Profit Records Management Tool Kit

SAME PRINCIPLES APPLY, BUT NEW MANDATES FOR CHANGE

Information Governance: Where is ARMA International Headed? David M. Fleming, CRM, IGP, CIP ARMA Utah-Salt Lake Chapter Meeting September 18, 2014

What We ll Cover. Defensible Disposal of Records and Information Litigation Holds Information Governance the future of records management programs

Fundamentals of Information Governance:

Information Governance

YORK REGION DISTRICT SCHOOL BOARD. Policy and Procedure #160.0 Records and Information Management

PRESENTATION TOPICS 2/27/2014. Why Update Policies? 21st Century Best Practices for Information Governance & Policies. Why update policies??

ROLES & RESPONSIBILITIES OF RECORDS MANAGER

Information Management Strategic Plan - Methodology

Strategy, COBIT and Vision: HOW DO THEY RELATE? Ken Vander Wal, CISA, CPA, Past President, ISACA

Information Governance Policy

Electronic Documents: is any electronic media content that is intended to be used in either an electronic form or as printed output.

Information Governance Management Framework

Our Commitment to Information Security

C ETS C/ETS: CYBER INTELLIGENCE + ENTERPRISE SOLUTIONS CSCSS / ENTERPRISE TECHNOLOGY + SECURITY

Information Governance Policy

Washington State s Use of the IBM Data Governance Unified Process Best Practices

10 Steps to Establishing an Effective Retention Policy

Big Data, Big Risk, Big Rewards. Hussein Syed

Tactics v. Strategy: From Records & Information Management to Information Governance

From Information Management to Information Governance: The New Paradigm

Services. Cybersecurity. Capgemini & Sogeti. Guiding enterprises and government through digital transformation while keeping them secure

IT Security Risk Management: A Lifecycle Approach

How To Manage Cloud Data Safely

The Relationship Between Information Governance, Data Governance, and Big Data. Richard Kessler November 2015

The CIPM certification is comprised of two domains: Privacy Program Governance (I) and Privacy Program Operational Life Cycle (II).

AHIMA: Leading Information Governance for Healthcare

IAPP Global Privacy Summit Protecting Privacy Under the Cybersecurity Microscope

Course Content Summary ITN 267 Legal Topics in Network Security (3 Credits)

Cloud Service Contracts: An Issue of Trust

INFORMATION GOVERNANCE Principles for Healthcare (IGPHC)

Retention & Disposition in the Cloud Do you really have control?

BEFORE USING THIS GUIDANCE, MAKE SURE YOU HAVE THE MOST UP TO DATE VERSION GUIDANCE 2 POLICY AREA: INFORMATION GOVERNANCE

Defensible Disposition Strategies for Disposing of Structured Data - etrash

Enterprise Data Management for SAP. Gaining competitive advantage with holistic enterprise data management across the data lifecycle

Cyber Risks in the Boardroom

Certified Information Professional 2016 Update Outline

CONSULTING IMAGE PLACEHOLDER

Third Party Risk Management 12 April 2012

The World of Information Governance

4.10 Information Management Policy

IBM Data Security Services for endpoint data protection endpoint data loss prevention solution

State Agency Cyber Security Survey v October State Agency Cybersecurity Survey v 3.4

University of Michigan Medical School Data Governance Council Charter

LEEDS BECKETT UNIVERSITY. Information Security Policy. 1.0 Introduction

Information governance strategy

Real World Strategies for Migrating and Decommissioning Legacy Applications

CYBER & PRIVACY INSURANCE FOR FINANCIAL INSTITUTIONS

Cloud Security Who do you trust?

a Legal Project Management Consultancy Plan. Resource. Realize.

Records Management Policy

Seamless Mobile Security for Network Operators. Build a secure foundation for winning new wireless services revenue.

Privacy and Security Framework, February 2010

Records Management: Seven Best Practices for Staying Ahead of the Curve

Competency Requirements for Executive Director Candidates

Rowan University Data Governance Policy

Information Management Strategy. July 2012

RECORD AND INFORMATION MANAGEMENT FRAMEWORK FOR ONTARIO SCHOOL BOARDS/AUTHORITIES

Blending Corporate Governance with. Information Security

CORPORATE GOVERNANCE GUIDELINES WD 40 COMPANY

Financial Markets Authority Website:

Information Security for Managers

Central Agency for Information Technology

Information Management

Bridging the HIPAA/HITECH Compliance Gap

Standards for the Professional Practice of Internal Auditing

Compliance Guide ISO Compliance Guide. September Contents. Introduction 1. Detailed Controls Mapping 2.

Transcription:

ARMA: Information Governance: A Revenue Source Potential

Presenter: Martin Tuip Executive Director for IG Products ARMA International

Agenda About ARMA International What is Information Governance? Generally Accepted Recordkeeping Principles (The Principles) State of the Law Firm Market Information Governance Assessment

About ARMA International Non-profit professional association for records and information managers and related industry practitioners and vendors Founded in 1955 27,000 members in 30 countries Providers educational opportunities and educational publications covering the principles of records management for its standards and guidelines The authority on information governance

Information Governance Information Management concerns how information flows through an organization; Information Governance asks why you have the information in the first place.

What is Information Governance? Gartner defines information governance as the specification of decision rights and an accountability framework to ensure appropriate behavior in the valuation, creation, storage, use, archiving and deletion of information. It includes the processes, roles, policies, standards and metrics that ensure the effective and efficient use of information in enabling an organization to achieve its goals.

Insights Currently, there is an unprecedented growth of content within organizations. Now more than ever, the need for governance across all stages of the information lifecycle is becoming more critical. Organizations must evaluate and address the big risks associated with information governance failures. More importantly, they need to find ways to leverage the opportunities that information governance can offer.

Generally Accepted Recordkeeping Principles (The Principles) Legislators to craft legislation meant to hold organizations accountable The Principles guide: CEOs to determine how to protect their organizations in the use of information assets Records management professionals to design comprehensive and effective records management programs

What are The Principles? Developed and published by ARMA International Foster general awareness of information governance standards and principles Assist organizations in developing information management systems that comply with them. Are grounded in practical experience and based on extensive consideration and analysis of legal doctrine and information theory Form the basis upon which every effective information governance program is built 9

What are The Principles? Principle of Accountability Do you have appropriate oversight over the individuals, policies and procedures to ensure your recordkeeping program auditability? Principle of Integrity Does the information generated or managed by the organization have a reasonable and suitable guarantee of authenticity and reliability? Principle of Protection Do you have controls in place to ensure a reasonable level of protection to records and information that are private, confidential, privileged, secret, or essential to business continuity? Principle of Compliance Are you in compliance with applicable laws and other binding authorities, as well as organizational policies as they relate to IG? 10

What are The Principles? Principle of Availability Can you ensure timely, efficient, and accurate retrieval of needed information in the event e-discovery request? Principle of Retention Are you maintaining records and information for an appropriate amount of time, taking into account legal, regulatory, fiscal, operational, and historical requirements? Principle of Disposition Are you providing secure and appropriate disposition for records that are no longer required to be maintained by applicable laws and the organization s policies? Principle of Transparency Are the processes and activities of your recordkeeping program documented in an understandable manner and available to all personnel and appropriate interested parties? 11

State of the Law Firm Market

State of the Law Firm Market Growing amount of clients are demanding fixed-fee contracts Nearly half of finance directors at top 100 law firms see fixed fees as the number one threat to their profit margins Highly competitive market

Information Governance and Law Firms Help clients get their information governance policies under control Further develop a deep trust relationship with clients Enable ability to create a new law firm practice with new revenue Information Governance

Latest development Resolution 109

Latest development The American Bar Association encourages all private and public sector organizations to develop, implement, and maintain an appropriate cybersecurity program that complies with applicable ethical and legal obligations and is tailored to the nature and scope of the organization and the data and systems to be protected.

Weakest link

Protection of data is important Protection of one of the most valuable and vulnerable assets of all organizations its information is vitally important Avoids the high costs associated with cybercrime, including forensic investigations and data breach notification; the loss of confidential, classified, and proprietary data; reputational damage; loss of public confidence; and in the case of business, drops in stock price, and loss of market share and trust.

Where does revenue generation come into play? Relationship matters

IG complexity It is very difficult for organizations to get a holistic view of their IG status as in its whole several departments have responsibility for different components and rarely talk with each other (let alone use the same language) IG complexity increases exponentially with the complexity of the organization and its business

Who needs to be at the table?

Who Needs To Be At The Table? Same goals, different departments Legal Business Management Risk, Compliance / Privacy Officer Information Security Specialists Records Management Information Technology Senior Management Champion Change Management

Start with an assessment Where are you?

ARMA and ILTA members Special pricing ARMA s IG Assessment ILTA members receive REDUCED pricing. First assessment at $4,495 (a $500 discount) It s a firsttime use so you can understand how they will deploy with their client set or use internally 5-license package purchase at $5995, for the purpose of assessing 5 clients within a 12-month period Additional licenses can be purchased at the rate of $1,199 each.

ARMA and ILTA members Special pricing To purchase contact ARMA directly and mention ILTA membership pricing David.vickers@armaintl.org +1.888.274.9137 or +1.913.428.8924 international

Thank you Contact information: Martin.Tuip@armaintl.org 425-996-8508 www.arma.org www.arma.org/assessment

Information Governance Assessment The ARMA Information Governance Assessment is an unbiased, comprehensive solution designed to help organizations turn information into an asset. Based on the fundamental best practices of the Generally Accepted Recordkeeping Principles Identifies, measures and monitors information risks, enabling your organization to establish a baseline, set benchmarks and drive improvements.

Information Governance Assessment

Information Governance Assessment