Information Governance

Intended for those who are involved in information-related activities or who are responsible for or affected by their organizations' information governance (IG) initiatives, this book can also be used as a textbook by colleges and universities that offer courses in IG or related topics at the graduate or advanced undergraduate level. The book's treatment of IG is practical rather than theoretical. It is divided into three parts: Part 1 provides an introduction to IG concepts. It defines key terms, explains the business case for IG as a strategic initiative, surveys governance frameworks, and discusses the roles, responsibilities, and interactions of IG stakeholders. It also describes related governance initiatives and explains the role of maturity analysis in planning and assessing an organization's IG program. Part 2 surveys legal and regulatory requirements that affect IG stakeholders and initiatives. The survey covers recordkeeping requirements, data protection and privacy requirements, information security requirements, information disclosure requirements, and statutes of limitations. For each category, the survey summarizes and cites examples of typical laws and regulations and explains their impact on IG. Part 3 examines technologies that are important for IG initiatives. The discussion covers technologies that organize, analyze, and categorize information; technologies that manage the information lifecycle; technologies that retrieve information; and technologies that address risk management and information security requirements. The discussion describes the most important characteristics of each technology and assesses its impact on IG stakeholders and requirements. The appendices include a comparison of governance models, a responsibility assignment matrix, stakeholder and technology matrices. a glossary, and suggestions for finding additional information about IG concepts, requirements, and technologies.