Information governance rises up the corporate agenda

SILVER SPRING, USA: Many organisations feel they are at risk because of a lack of information governance polices, according to recently publish AIIM research report, with data lapses over the past 12 months sharpening focus on the security and privacy elements of information governance.

The survey of more than 500 business leaders revealed that although electronic records are "increasing rapidly" in 68 per cent of organisations, just 10 per cent of respondents have an information governance policy in place that is respected and enforced. 21 per cent have a policy in place, but it is mostly ignored.

"The impact of data leaks and security breaches over the past year has brought the security and privacy elements of information governance into focus more than ever before," said Doug Miles, director Market Intelligence, AIIM. "Massive data leaks of personal information have damaged corporate reputations and organisations need to work much harder to protect and preserve content."

The survey also found a strong movement away from narrowly-focused records management policies, to the much wider scope of information governance across all active and stored content.

With only 12 per cent of respondents confident they store only what they are required to store, 43 per cent said that automated classification was the only way to keep up with the rapidly increasing information volumes. Just 14 per cent are already using automation although a further 35 per cent have immediate plans to do so.

The three biggest benefits from automated classification according to research participants were improved searchability (48 per cent), higher productivity (29 per cent) and defensible compliance (29 per cent).

To be successful, automated schemes need to be matched with a comprehensive information governance policy. However, of those with an agreed policy, only 19 per cent regularly audit for compliance.

40 per cent do not allocate any staff time for information governance training, and only 4 per cent specifically update senior management. Creating a comprehensive information governance policy is a major task, and the keys to success are senior management endorsement and staff engagement.

"The reality for organisations now is that many more types of content and information need to be governed, but the volume, velocity and variety of it makes it virtually impossible to manually maintain the all-important metadata and so automation is a critical requirement," said Miles.

"We would encourage any organisation to get senior buy-in around their information governance policy. It is a business issue, not an IT one and CEOs must be aware of the requirements and the best ways of meeting those."