Information governance is the development of a decision and accountability framework that defines acceptable behavior in the creation, valuation, use, sharing, storage, archiving, and deletion of information. It encompasses the policies, standards, processes, metrics, and roles guiding the efficient and effective use of information for an organization to realize its objectives. The term information governance is suitably broad to act as a reasonably comprehensive term. However, this also means the definition of that term is open to debate. As such, similar terms can also be heard which refer to similar disciplines and technology. This includes Data Lifecycle Management, Data Governance, and Information Management.
Information governance recognizes information as a strategic asset that must be subjected to high-level coordination and oversight. This ensures accountability, integrity, preservation, and protection of information enterprise-wide, and as a disciplined aims to treat the task holistically by removing silos and fragmentation, improving ROI on the technology and resources needed to manage information.
Micro Focus’ range of solutions that support this discipline has the label Information Management and Governance. This phrase broadens the definition to consider two strategically critical elements of effective information governance, namely the data and the employees.
Information governance (or Information Management and Governance – see above) is an emerging discipline so there is still some debate around the role it plays in the enterprise. Nevertheless, a well-implemented information governance program should yield the following benefits for the business at the minimum.
The terms information governance and data governance are frequently used interchangeably. They do not however refer to the exact same thing. Understanding the differences between them is central to developing an effective approach to enterprise information management.
Information governance is a broad range of activities that covers all aspects of information within the organization. It is business-, legal- and compliance-driven. Components of information governance include categorization, information use definition, access management, records management, document handling, information lifecycle, secure removal (disposition), eDiscovery, cybersecurity, and, yes, data governance. In this sense, data governance is a subset of information governance.
Information governance professionals are skilled in records management, privacy, collaboration, discovery, and disposition.
Data governance focuses on the storage, transfer, and integrity of data assets. It’s IT-driven and involves data lineage, data security, data loss prevention, data service levels, and master data management. It’s a more established discipline than information governance.
Data governance experts have competence in data modeling, data architecture, data integration, data privacy, and master data management.
Effective data governance is a key component of enterprise information governance. However, good data governance does not of itself guarantee good information governance. An organization’s information management is at its best when there’s strong, fruitful collaboration between its information governance and data governance teams.
Information governance software provides the automated tools the organization needs to comply with vast information governance demands. Identifying, analyzing, adopting, and implementing the right software is crucial in the realization of information governance objectives.
Information technology governance software often includes process and workflow automation solutions that digitize the repetitive and mundane elements of information governance.
The purpose of an information technology governance framework is to establish the organization’s approach toward information management within a business, legal, and regulatory context. An effective framework covers the following areas.
Establish the scope of the information governance program. Set out the procedures that govern the creating, sharing, storage, and disposal of information. Define the management of all information and associated systems that affect the enterprise’s legal and regulatory obligations.
Define the key roles and responsibilities in information governance. That includes the information governance committee, information governance team, information risk management team, information asset management team, records management team, business line managers, and employees.
Information governance includes multiple distinct policies and procedures. The framework should explicitly enumerate the policies that affect information governance including information security policy, retention policy, disposal policy, archiving policy, privacy policy, ICT policy, remote working policy, and information sharing policy. Information procedures then determine and define how the organization and employees interact with information according to each policy stipulated.
Some enterprise information will be created and stored by third parties. The framework establishes how the organization manages information with partners, suppliers, and stakeholders. Define how information governance affects contractual obligations and supplier relationships. Establish metrics that third parties are evaluated against to confirm conformity with information governance goals.
The framework should set out the process for reporting information losses, reporting information breaches, incident management, incident escalation, disaster recovery, and business continuity.
Continuous monitoring of information access, information use, regulatory compliance, information security, infrastructure performance, and storage performance. Conduct regular risk assessments, audits, and reviews.
Understanding the definitions and importance of information governance, data governance, and information governance framework is crucial. But what are some of the components of effective information governance?
Locate, capture, manage, and store information wherever it resides within the enterprise. Identify the different types of structured and unstructured information in the organization. Where is the information stored? Who is in charge of it? Is it backed up? Is it relevant?
The management of information across its entire lifecycle, from capture to removal. It covers the identification, classification, storage, securing, retrieval, tracking, preservation, and destruction of records. As the name suggests, the focus here is on the granular element of the information, namely the record level. Other disciplines (see Knowledge Management, and Content Management, below) seek to further abstract the granularity of the information.
The creating, sharing, use, and management of information held by the organization in order to satisfy corporate objectives.
The creating, sharing, use, and management of information held by the organization in order to satisfy corporate objectives. This term emphasizes the value of the information being stored in terms of what it presents, i.e. as content.
Given this discipline is often associated with compliance initiatives, the necessity for enterprise-scale rigor and security means the labels Secure Content Management (SCM) or Enterprise Content Management (ECM) are often used.
Having been developed and enhanced since the 1990s, Micro Focus offers a uniquely capable Secure Content Management solution which aims to maintain operational security and integrity by knowing what data is stored, who has access to it & what policies are most effective in managing.
If your business wasn’t part of the digital economy before COVID-19, it’s certainly well on its way now. The digital economy includes working from home, and safely collaborating with your employees, partners, and customers, Download this ebook to learn how you can preserve, retain, govern, and gain insight into your data. How easy is it to do all that with confidence? And run your business at the same time?
Know your data. Empower your people. Drive your future.
At the logical end of the data lifecycle is the necessity to archive data. Archiving prevents endless accumulation of information. Whether it is legacy information, mobile messages, or social media communication, information retrieval is quicker when there is a clear, well-thought-out archiving process and infrastructure. Furthermore, such is the amount of data and the amount of potential retrieval requirements (for strategic, compliance or litigation purposes), a well-managed information archiving discipline (sometimes referred to therefore as Compliance Archiving) requires organizations to view the data as “active”, rather than in a state of cold storage.
Archiving technology will manage the location, ingestion, storage and interrogation of archived information for the organization, enabling supervisors to monitor access, compliance requirements, customize information retention periods and expunge information once the retention period expires.
Robust technology solutions from Micro Focus support organizations looking to Archive email, archive text messages, or create a social media archive. A more holistic compliance archiving solution in the form of Micro Focus Digital Safe cloud archiving unites structured and unstructured information and storage and retrieval requirements in an all-in-one, comprehensive cloud-based repository.
Analysts refer to this discipline, and the technology that supports it, as Enterprise Information Archiving, or simply Information Archiving. The Micro Focus information compliance archiving solution offers a robust range of capabilities to support this discipline.
Ensure information is available, authentic, accurate, and secure. Know who has access to what information. Mitigate against and manage risks that arise from unauthorized or unnecessary access to information. Employees should not be privy to information that is not necessary for discharging their roles, nor should they access business information via insecure channels.
Establish strategies and policies for the administration of storage systems, security infrastructure, disaster recovery, data replication, and storage architecture management.
The discovery process in litigation, information requests, government investigation, and other legal proceedings where information is stored in electronic form.
Information governance is an ongoing project. Develop mechanisms for regularly monitoring, reviewing, and improving governance policies and procedures. The business, technology, and regulatory environment is never static. Strategies that were effective five years ago may be ill equipped to deal with present realities.
Ultimately, the value of good information governance is measured by the quality of the strategic decision-making that the data supports. As such, the data is only as useful as the ability to derive appropriate insight from it, making the discipline of data analytics hugely important to any organizations strategic efforts.
Outside the scope of content management or compliance archiving, the task of understanding all forms of data to support strategic decisions is a far broader topic, which has to take into account the vastness and sheer variety of data sources and formats. Organizations need to realize the operational reality that only 20% of data being created will neatly fit in a table, commonly known as structured data. The other 80% is delivered in varied formats collectively known as unstructured data. As such, a greater level of technological complexity is required to provide a platform for collation, examination and insight from all data sources. As a result, the label Data Analytics sometimes appears as the term Unified Analytics.
Unified Analytics take into account information streams generated from several sources to decode the information within, and allows organizations to make strategic decisions based on a holistic set of actionable insights. Those data sources include:
Analysts refer to this discipline, and the support that supports it, as Text Analytics or Insight Engines.
Information governance requires an effective strategy for capturing, storing and interrogating data, plus appropriate facilities for how employees work on inputting, sharing, collaborating and protecting the data and how they access it.
As such, an important sub-element of effective Information Governance are two other disciplines referred to as Collaboration and Unified Endpoint Management.
As the name suggests, the discipline of Collaboration brings people, projects, and processes together in one secure place to enhance team and employee productivity.
Micro Focus’ Collaboration solution fosters a productive, mobile workforce through better communication, team collaboration, BYOD, and easy access on any device.
Organizations manage hundreds or thousands of devices and applications, numerous assets, and an unending list of software patches. Additionally, the workforce is constantly changing with new requests every day and under pressure from the changes in working habits. Applying discipline to managing all points of access from employee to organizational resources, including all devices, and each other, has the label Unified Endpoint Management.
Micro Focus’ long-standing solution for endpoint management provides everything required to track, manage, and protect organizational devices.
Analysts refer to this discipline, and the support that supports it, as Unified Endpoint Management Software.
Information can be a powerful, indispensable, game-changing asset for any organization. But that’s only if it is administered the way it should. The scale, complexity, and diversity of information today’s enterprise deals with can be noisy, overwhelming, and debilitating. Old-school information management methods where a single source of truth was easy to create and the custodians of information were clearly identifiable, are no longer feasible. Now, information governance professionals have to evaluate the impact of internal collaboration platforms, application programming interfaces (APIs), third-party integrations, and social media channels.
Just about every large organization today claims to be data-driven. Enterprises that implement a sound information governance strategy bolster information availability, mitigate risks, contain costs, and comply with regulations.
Micro Focus supports the various disciplines of information governance with enterprise class technology by providing a comprehensive range of solutions incuding:
Read more on Micro Focus’ strategy for Information Management and Governance.
