Tag Archives | Information Governance

Tweet Me This Batman

For now this is the last in a series of thoughts regarding the reining in of social networking applications. ‘Opening a Pandora’s Box – Collaboration, Social, and Litigation’ can be accessed here, and ‘Can the Caged Bird Sing’ can be accessed here. In yet another article, ‘Pitfalls of Social Networking at Work’, the author outlines both employee and management guidelines on the management and recommended ‘rules’ for social networking. The issue, of course, is the merging of personal and business, and the premise is that ‘personal’ does indeed impact the ‘business’.

A few years ago there was an uproar regarding potential employers asking for log-in information from potential candidates’ personal sites and accounts. I always felt that was a clear invasion of privacy. Although the author agreed with me, on the other hand the author does quote a source that states you could not separate one’s personal views from one’s employers’ views in the social media space. “Social media must be properly managed with a written social media policy that sets boundaries on what can be said or not said by the employee on social media space and the consequences of that action must be specific.”

How does an organization manage this with potentially thousands of employees? Do they have a right to tell employees what they can and cannot say on personal sites? Do organizations just wait to see if an ill-stated or harmful comment is made and then try to mitigate the problem?

Comments { 0 }

Concept Searching and PPC Announce Details of the 2013 Expert Webinar Series

Back by popular demand – All new webinars focusing on best practices and approaches addressing high-profile topics in managing unstructured content

Concept Searching is pleased to announce the schedule for the 2013 Expert Webinar Series hosted jointly with PPC. In their third year, these webinars have proven to be highly-successful and informative for attendees. New topics this year include a focus on managing unstructured and semi-structured content, and tackling new challenges that are becoming priorities, regardless of industry.

Enterprises are attempting to proactively address the range of challenges due to the explosion of unstructured content. Not only is enterprise search resurging as a high-priority infrastructure component, but collaboration in the cloud, cyber security, simplifying records identification and document life cycle management, information governance, and evaluating open-source options are all coming to the forefront as ways to not only protect organizations but also improve business performance and productivity. The Concept Searching and PPC Webinar Series identifies best practices on these topics, and has been designed to be both educational and practical, providing strategic as well as tactical guidelines and knowledge.

To read the press release, click here. To visit our upcoming webinar page, please click here.

Comments are closed

Get in the Fast Lane Grandma the Bingo Game is ready to Roll!

I just read a snippet of marketing for a new report from Forrester entitled, ‘Building Data Stewardship Is A New Customer Intelligence Imperative’ (fee required unless you are a Forrester client). It’s a subject that is near and dear to our hearts. Forrester recommends a data steward. The data steward’s raison d’étre is to keep track of data collection, governance, and privacy, which would include global imperatives (obviously if the company is global). I perceive that as not only a tremendous task but also high risk position, especially with the potential of failure.

The first hurdle is related to the tracking and implementation of governance, compliance, and privacy laws. According to the report there were ‘more than 150 pieces of privacy legislation pending in the US Congress as well as more than 90 other policies from international governing bodies’. Even if you do business only in your country there are still compliance and mandates that fall under different jurisdictions such as state, county, etc. I see this as the first hurdle to keep up with changes (all changes) and start them through the implementation process.

The second hurdle is the actual implementation of the compliance mandates throughout the organization, and potentially in a short time frame. I’m not sure how flexible and agile organizations are to incorporate these changes. I know in the US you typically have a window of time to implement but for the organization, implementation can touch many different functional areas including legal, finance, etc. all the way down to the end user.

Taking on the role of a data steward sure doesn’t seem like a stress free job. Not that all our jobs are stress free, but this one seems particularly so. I am curious if your organization has a data steward? What is their role? If you know, what is their background. Or am I all wet and it’s as easy as matching the numbers in a bingo game?

Comments { 0 }

Information Governance – Nice idea but we really don’t care.

As a vendor we push the importance of information governance, not that we sell information governance just provide technologies that help. So information governance is something we believe all companies should be taking the time to thoughtfully plan, deploy, and manage.

The link between information governance, E-Discovery, and litigation support are closely intertwined. We have a very large client who was burned to the tune of billions (and billions) of dollars for not having an effective information governance plan (or even a plan at all). A pretty hefty price to pay.

In a recent research report by 451 Research, ” E-Discovery and E-Disclosure 2013: The Ongoing Journey to Proactive Information Governance” the results indicated that only 32% of senior management felt that information governance was important. It appears we are not all on the same page here.

For the sake of conversation because I am obviously on the wrong track here, is information governance important to your organization? If so, how did you deploy, is it working? Do you feel that the enterprise is better able to face litigation, E-Discovery, and compliance issues? Or are you like the other 68% that really doesn’t care?

Comments { 0 }

Where’s the missing link in government?

Although this blog focuses around government it highlights an interesting paradox. The first article details the US federal Chief Information Officers Council update on the list of core competencies for training and hiring policies so they can hire personnel that are capable of addressing new technology challenges facing government. The council recently released an updated Clinger-Cohen Core Competencies and Learning Objectives and recommended that every federal agency should include staff with experience in social media, open government, and cloud computing.

The document also includes new “competencies” in IT governance, IT program management leadership, vendor management, cybersecurity, and information assurance strategies and plans. According to the article, “Federal chief information officers should ensure that the knowledge, skills and abilities represented in each competency in this document are resident within their organization for overall staff productivity,” the document said. So far all’s well and good and a step in the right direction.

Switch to another scenario. In an editorial by Steve O’Keeffe, from MeriTalk, he discusses the GAO Report released in late January. What struck me as I read both articles back to back is the apparent lack of integrated agency operational plans and the lack of accountability. Some highlights from Mr. O’Keeffe’s article that are recommended in the first article are noted below.

  • Rampant systems duplication – with 777 supply chain systems, they now need a supply chain system to track their supply chain system inventory
  • Agencies spend 73 percent of “defined” IT budget on maintaining old systems
  • IT Dashboard says almost $12.5 billion in IT projects at risk
  • $3 billion worth of IT projects are without governance
  • Data center diaspora and dollar discrepancies. Only three of 24 agencies submitted data center inventories and only one has a complete consolidation plan
  • Failed IT programs total 2.6 billion

I wonder in a ‘real’ organization how often the best laid plans of mice and men often go astray? Although if you add up IT government agency spending it would probably make our eyes pop (luckily for us no one knows what that amount is), but even on a smaller scale how many companies state corporate direction and then it all falls through the cracks? The government is not alone. It is probably more than we think.

 

Comments are closed

A Game of Tug and War – Is your content protected in third party hands?

An interesting article I just read illustrates the importance of making sure confidential information is protected when in the hands of third parties. It has nothing to do with breaches but holding confidential content hostage in a game of tug of war between a client and a vendor. I had actually never thought of this before.

The dispute is between Glaxo SmithKline and a litigation and eDiscovery vendor named Discovery Works. Discovery Works was withholding up to 50 terabytes of confidential information, including trade secrets, patent portfolio data, pricing information, sensitive communications among top executives, and privileged work product that belonged to Glaxo. It also appears that Discovery Works was facing insolvency and in a rather emotional moment, the CEO Harry Debari sent the following to Glaxo and their legal team: “Wire $55,000 to a secret account or its “bombs away.” The vendor allegedly threatened to destroy hundreds of millions of documents belonging to GlaxoSmithKline unless that sum was paid.

The article brought up a good point in saying “The case makes a strong argument for a “buyer beware” warning to even large corporations. London-based Glaxo is among the world’s biggest pharmaceutical companies with revenues of about $27 billion. Some may wonder how a conglomerate that is constantly in litigation would entrust so much sensitive data to a company of modest means and few employees.”

The suit has been resolved, but how it was resolved is not available to the public. According to Glaxo, “If [confidential data is] disclosed, the genie could not be put back in the bottle,” Glaxo said.

Even though there was a contractual agreement to return the confidential information it obviously had no impact in this situation. I am wondering what you do for due diligence. As the author pointed out why would Glaxo entrust their confidential data to Discovery Works. Although rather an odd occurrence, are there any precautions your organization takes in this scenario? Is it possible to take any precautions?

Comments are closed