In Order To Have A Successful Ig Program One Of The Eight 8 Informa ✓ Solved

In order to have a successful IG program, one of the eight (8) Information Risk Planning and Management step is to develop metrics and measure results. From your required readings, discuss the value that metrics brings to the organization, and identify critical measures of success that should be tracked CHAPTER GOALS AND OBJECTIVES ïµ Know the 8 Generally Accepted Recordkeeping Principles® ïµ What is the IG Reference Model? ïµ What does the IGRM Diagram consist of? ïµ What are the best practice considerations? ïµ What is the benefits and risks of having standards? ïµ What are the key standards relevant to IG 2 A Review of the 8 Generally Accepted Recording Keeping Principles® 1. Accountability 2.

Transparency 3. Integrity 4. Protection 5. Compliance 6. Availability 7.

Retention 8. Disposition So…what is the significance of these principles? 3 IG REFERENCE MODEL ➢ Who? ➢ ARMA International & CGOC ➢ When? ➢ 2012 ➢ Where? ➢ As part of the EDRM Project Version 3.0 ➢ Why? ➢ To foster the adoption by facilitating communication and collaboration between IG stakeholder functions, legal, records management, risk management, and business unit stakeholders. 4 HOW TO INTERPRET THE IGRM DIAGRAM Outer Ring: Complex set of interoperable processes and implementing he procedures and structural element to put them into practice ➢ Requirements: ➢ Understanding of business imperatives ➢ Knowledge of appropriate tools and infrastructure ➢ Sensitivity to legal and regulatory obligations Inner Ring: Depicts a work-flow (life-cycle) diagram.

Shows that information management is important at all stages of the lifecycle 5 How the IGRM Diagram related to the Generally Accepted Recordkeeping Principles® ➢ Support the ARMA Principle by identifying the cross-functional groups of IG stakeholders ➢ Depicts the intersecting objectives of the organization ➢ Depicts the relationship duty, value and information assets ➢ Used by proactive organizations as an introspective lens to facilitate visualization, understanding and discussion concerning how to apple the “Principles†to the organization. ➢ Puts focus on the “Principles†➢ Provides essential context for the maturity model 6 Considerations in IG Policy Formation ➢ Best Practices? ➢ YES! ➢ Understand that Best Practices will vary per organization ➢ Review 25 generic Best Practices, Pages 75 and 76 of text book 7 ➢ Standards? ➢ YES! ➢ Two types to consider ➢ De Jure Standards - Legal standards published by standards setting bodies such as IOS, ANSI, NIST, BTS and others ➢ De Facto Standards – Informal standards regarded by many as actual standards – arising through popular use (Example: Windows in the business world in ).

May be published by formal standards setting bodies without having “Formal†status Benefits and Risks of Standards Benefits ➢ Quality Assurance Support ➢ Interoperability Support ➢ Implementation Framework and Certification Checklists ➢ Cost Reduction ➢ International Consensus 8 Risks ➢ Possible Decreased Flexibility ➢ Standards Confusion ➢ Real-World Shortcomings to due Theoretical Basis ➢ Cost and Maintenance Involving in Updating Standard KEY STANDARDS RELEVANT TO IG Risk Management ➢ ISO – States principles and generic guidelines of risk management applicable to IG ➢ Provides a structured framework for development and implementation of risk management strategies and programs ➢ “Risk Management Frameworkâ€: Set of two basic components (foundations and organizational arrangements) that support and sustain risk management throughout the organization.

9 KEY STANDARDS RELEVANT TO IG Information Security Management ➢ ISO/IEC 27001:2005- Information Security Management System Standard that provides guidance in development of security controls for protection of information assets ➢ Flexible –can be applied to different activities and processes ➢ Includes use of standards by auditors and stakeholders ➢ ISO/IEC 27002:2005-Information Technology-Security Techniques-Code of Practice for Information Security ➢ Establishes guidelines and general principle for initiating, implementing, maintaining and improving information security mgt. ➢ Includes Best Practices of Control Objectives in 11 key areas of information security management ➢ ISO/IE 38500:2008 –International Standard for high-level principle and guidance for senior executives and directors, and advisors for effective and efficient use of IT ➢ Three major sections ➢ Scope, Application and Objectives ➢ Framework for Good Corporate Governance of IT ➢ Guidance for Corporate Governance of IT 10 KEY STANDARDS RELEVANT TO IG RECORDS AND E-RECORDS MANAGEMENT ➢ ISO :2001 and ISO :2001– International Standard for Records Management ➢ Part 1:Provides a framework and high-level overview of RM core principles ➢ Part 1:Defines RM as “Field of management responsibility for the efficient and systematic control of creation receipt, maintenance, use and disposition of records, including processes for capturing and maintaining evidence of and information about business activities and transactions in the form of recordsâ€1 ➢ Part 2: Technical Specifications and Methodology for implementing standard ➢ ISO 30300;2011 – Information and Documentation-Management Systems for Records- Fundamentals and Vocabulary ➢ ISO 30301:2011 – Information and Documentation-Management Systems for Records – Requirements 1ISO :2001 Information and Documentation-Records Management, Part 1:General Geneva: ISO, 2001), section 3.16.

11 NATIONAL, INTERNATIONAL AND REGIONAL ERM STANDARDS United States E-Records Standard ➢ U.S. DOD 5015.2 Design Criteria Standard For Electronic Records Management Software Applications ➢ Developed in 1997 ➢ Updated in 2002 and 2007 Canadian Standards ➢ Electronic Records as Documentary Evidence CAN/CGSB-72. ➢ Microfilm and Electronic Images as Documentary Evidence CAN/DGSB-72.11-93 ➢ Canadian Legal Considerations ➢ Relies on prime directive-that an organization shall always be prepared to produce its records as evidence- and its national standards, for the admissibility of electronic records in court proceedings ➢ The admissibility of records as evidence is determined under the business records provisions of the Evidence Act 12 NATIONAL, INTERNATIONAL AND REGIONAL ERM STANDARDS…CONTINUED United Kingdom ➢ The National Archives ➢ To sets of functions requirements to promote the development of the electronic records management software market (one in 1999 and one in 2002) ➢ Model Requirements of Electronic Records ➢ MoReq2 ➢ MoReq2010 Australian ERM and Records Management Standards ➢ Has consistently been world leader in this area ➢ Adopted all three parts of ISO 16175 as its e-records standard ➢ Australian Government Recordkeeping Metadata Standard Version 2.0 ➢ Australian Government Locator Service ➢ AS 5090:2003 – Work Process Analysis for Recordkeeping 13 LONG-TERM DIGITAL PRESERVATION ➢ Referred to as “LTDP†➢ LTDP is a key area for IG policy development ➢ Frequently not addressed in an IG plan ➢ Should be applied in preserving historical and “vital records†and in order to maintain its corporate or organizational memory ➢ Key Standards for LTDP: ➢ PDF/A-2 –official standard format for preserving electronic documents, developed by Adobe. ➢ ISO :2005 Document Management is the published specification requiring PDF format ➢ ISO 14721:2012 – Space Data and Information Transfer Systems –Open Archival Information Systems ➢ ISO TR ) – Long Term Preservation of Electronic Document Based Information ➢ ISO 16363:2012 – Space Data and Information Transfer Systems-Audit and Certification of Trustworthy Digital Repositories 14 BUSINESS CONTINUITY MANAGEMENT ➢ ISO 22301:2012 – Societal Security – Business Continuity Management Systems Requirements ➢ Specifies requirements for creating and implementing a standardized approach to business continuity management ----- this is also known as Disaster Recovery Benefits of ISO 22301 ➢ Threat Identification and Assessment ➢ Threat and Recovery Planning ➢ Mission-critical process protection ➢ Stakeholder Confidence 15 THINGS TO REMEMBER IN DEVELOPING THE IG POLICY ïµ Take into account organizational goals ïµ Draw clear lines of authority ïµ Make sure you have an executive sponsor who can garner executive support for the IG program and policies ïµ IG program must contain communications and training component ïµ Stakeholders must be made aware of new policies and practices ïµ Make sure you have metrics that are relevant and useful and can actually be measured ïµ Test and audit ïµ Give feedback to employees based upon metrics, tests and audit results ïµ Establish and enforce clear penalties for policy violations and communicate that to employees ïµ Take into account organizational culture 16 The End 17 Topic: This week's reading centered around how Big Data analytics can be used with Smart Cities.

This is exciting and can provide many benefits to individuals as well as organizations. For this week's research assignment, you are to search the Internet for other uses of Big Data in RADICAL platforms. Please pick an organization or two and discuss the usage of big data in RADICAL platforms including how big data analytics is used in those situations as well as with Smart Cities. Your paper should meet these requirements: Be approximately four to six pages in length, not including the required cover page and reference page. Follow APA 7 guidelines.

Your paper should include an introduction, a body with fully developed content, and a conclusion. Support your answers with the readings from the course and at least two scholarly journal articles to support your positions, claims, and observation

Paper for above instructions

Introduction

In an era where information is the lifeblood of organizations, the successful management of information, or Information Governance (IG), has become crucial. The development of an effective IG program encompasses multiple dimensions, one of which is the establishment of metrics for accountability, evaluation, and improvement. This paper examines the value that metrics bring to an organization, identifies critical measures of success within an IG program, and discusses relevant standards and principles that govern effective information management.

The Value of Metrics in Information Governance

Metrics provide quantitative and qualitative measures that enable organizations to assess their performance, resource allocation, and compliance with regulatory requirements (Davenport, 2013). In the context of Information Governance, metrics serve several essential functions:
1. Performance Measurement: Metrics help assess how well the IG program is performing against organizational goals, ensuring that information is utilized effectively to achieve strategic objectives.
2. Decision-Making Support: Reliable metrics facilitate informed decision-making. They assist stakeholders in understanding the effectiveness and efficiency of current processes (Myers, 2020).
3. Accountability: Metrics provide a framework for accountability by establishing clear expectations for performance among various stakeholders involved in the IG program (Pritchard, 2022).
4. Continuous Improvement: Regular assessment using metrics allows organizations to identify areas of inefficiency, leading to improvements in processes and practices.
5. Compliance Validation: Metrics are instrumental in demonstrating compliance with legal and regulatory standards, allowing organizations to mitigate risks associated with non-compliance (Shannon & Moyer, 2022).

Critical Measures of Success in IG Programs

To maximize the effectiveness of an IG program, organizations should track various metrics aligned with the eight Generally Accepted Recordkeeping Principles (GARP). Here are some critical measures of success:

1. Accountability Metrics

These measures focus on identifying roles and responsibilities within the IG program, such as:
- Number of assigned responsibilities for records management and compliance.
- Percentage of stakeholders trained in IG roles.

2. Transparency Metrics

Metrics assessing transparency include:
- Percentage of records that are easily retrievable.
- Frequency of audits assessing compliance with IG policies.

3. Integrity Metrics

Integrity metrics focus on ensuring the reliability of information:
- Percentage of records that have undergone validation processes.
- Instances of data corruption incidents and response time to rectification.

4. Protection Metrics

To measure the effectiveness of information security measures:
- Number of breaches or attempted security violations reported annually.
- Percentage of sensitive records encrypted.

5. Compliance Metrics

Measuring compliance can be achieved through:
- Rate of compliance with relevant regulations, such as GDPR or HIPAA.
- Number of compliance violations reported versus resolved.

6. Availability Metrics

These metrics speak to the accessibility of information:
- Average time taken for information retrieval requests.
- Uptime percentage of record management systems.

7. Retention Metrics

Retention metrics include:
- Compliance rates with the organization’s retention schedule.
- Number of inactive records archived or disposed of in a timely manner.

8. Disposition Metrics

Metrics that monitor the disposal process are:
- Percentage of records properly disposed of in accordance with policy.
- Average time taken to complete the disposition of records.

Standards and Best Practices in IG

Organizations implementing IG programs should adhere to established standards that govern practices and policies:
1. ISO Standards: The ISO 27001 standard provides guidelines for information security management systems, while ISO 15489 outlines records management (ISO, 2021; ISO 2016). These standards offer a framework for developing an IG strategy that integrates risk management, compliance, and operational excellence.
2. The ARMA Principles: The eight Generally Accepted Recordkeeping Principles (GARP) provide foundational elements for effective recordkeeping programs that align with organizational goals (ARMA, 2020).
3. GDPR Compliance: Organizations must establish metrics to ensure compliance with data protection regulations, particularly regarding the processing, storage, and disposal of personal data (Cohen & Prewitt, 2021).
4. NIST Framework: The National Institute of Standards and Technology (NIST) provides a cybersecurity framework that can be integrated into IG strategies to measure and manage information risk (NIST, 2020).
5. Business Continuity Metrics: ISO 22301 provides guidelines for business continuity management that can drive metrics assessing the organization’s resilience against disruptions (ISO, 2020).

Conclusion

In conclusion, the establishment of metrics is essential for the success of an Information Governance program. Metrics provide a means to measure performance, support decision-making, enhance accountability, and ensure compliance with standards. By tracking critical measures of success linked to the Generally Accepted Recordkeeping Principles, organizations can proactively manage their information and improve overall efficiency. Furthermore, adherence to established industry standards reinforces the framework needed to support these metrics, ultimately leading to a more effective IG program.

References

1. ARMA International. (2020). Generally Accepted Recordkeeping Principles. ARMA.
2. Cohen, A., & Prewitt, J. (2021). Legal and ethical considerations in data protection compliance. Journal of Law and Cyber Warfare, 9(2), 139-158.
3. Davenport, T. H. (2013). Analytics at Work: Smarter Decisions, Better Results. Harvard Business Press.
4. ISO. (2016). ISO 15489-1:2016 Information and documentation — Records management — Part 1: Concepts and principles. ISO.
5. ISO. (2020). ISO 22301:2019 Societal Security – Business Continuity Management Systems – Requirements. ISO.
6. ISO. (2021). ISO 27001:2013 Information Security Management Systems – Requirements. ISO.
7. Myers, T. (2020). Performance metrics in information governance: Bridging the gap between theory and practice. Information & Management, 57(6), 103394.
8. NIST. (2020). Framework for Improving Critical Infrastructure Cybersecurity. National Institute of Standards and Technology.
9. Pritchard, L. (2022). Emphasizing accountability in information governance programs. International Journal of Information Management, 62, 102428.
10. Shannon, P., & Moyer, S. (2022). Compliance through metrics in information governance. Journal of Data Compliance, 4(1), 25-36.