Information Governance and Assurance


Book Description

This comprehensive textbook discusses the legal, organizational and ethical aspects of information governance, assurance and security and their relevance to all aspects of information work. Information governance describes the activities and practices which have developed to control the use of information, including, but not limited to, practices mandated by law. In a world in which information is increasingly seen as a top-level asset, the safeguarding and management of information is of concern to everyone. From the researcher who is responsible for ethical practices in the gathering, analysis, and storage of data, to the reference librarian who must deliver unbiased information; from the records manager who must respond to information requests, to the administrator handling personnel files, this book with equip practitioners and students alike to implement good information governance practice in real-world situations. Key topics covered include: - Information as an asset - The laws and regulations - Data quality management - Dealing with threats - Security, risk management and business continuity - Frameworks, policies, ethics and how it all fits together. Readership: Fully supported by examples, discussion points and practical exercises, this is essential reading for everyone who needs to understand, implement and support information assurance policies and information governance structures. It will be particularly valuable for LIS students taking information management and information governance courses, and information professionals with an advisory or gatekeeping role in information governance within an organization.




Information Security Governance


Book Description

The Growing Imperative Need for Effective Information Security Governance With monotonous regularity, headlines announce ever more spectacular failures of information security and mounting losses. The succession of corporate debacles and dramatic control failures in recent years underscores the necessity for information security to be tightly integrated into the fabric of every organization. The protection of an organization's most valuable asset information can no longer be relegated to low-level technical personnel, but must be considered an essential element of corporate governance that is critical to organizational success and survival. Written by an industry expert, Information Security Governance is the first book-length treatment of this important topic, providing readers with a step-by-step approach to developing and managing an effective information security program. Beginning with a general overview of governance, the book covers: The business case for information security Defining roles and responsibilities Developing strategic metrics Determining information security outcomes Setting security governance objectives Establishing risk management objectives Developing a cost-effective security strategy A sample strategy development The steps for implementing an effective strategy Developing meaningful security program development metrics Designing relevant information security management metrics Defining incident management and response metrics Complemented with action plans and sample policies that demonstrate to readers how to put these ideas into practice, Information Security Governance is indispensable reading for any professional who is involved in information security and assurance.




Information Governance and Security


Book Description

Information Governance and Security shows managers in any size organization how to create and implement the policies, procedures and training necessary to keep their organization’s most important asset—its proprietary information—safe from cyber and physical compromise. Many intrusions can be prevented if appropriate precautions are taken, and this book establishes the enterprise-level systems and disciplines necessary for managing all the information generated by an organization. In addition, the book encompasses the human element by considering proprietary information lost, damaged, or destroyed through negligence. By implementing the policies and procedures outlined in Information Governance and Security, organizations can proactively protect their reputation against the threats that most managers have never even thought of. Provides a step-by-step outline for developing an information governance policy that is appropriate for your organization Includes real-world examples and cases to help illustrate key concepts and issues Highlights standard information governance issues while addressing the circumstances unique to small, medium, and large companies




Information Security Governance


Book Description

IT Security governance is becoming an increasingly important issue for all levels of a company. IT systems are continuously exposed to a wide range of threats, which can result in huge risks that threaten to compromise the confidentiality, integrity, and availability of information. This book will be of use to those studying information security, as well as those in industry.




Data Governance: The Definitive Guide


Book Description

As your company moves data to the cloud, you need to consider a comprehensive approach to data governance, along with well-defined and agreed-upon policies to ensure you meet compliance. Data governance incorporates the ways that people, processes, and technology work together to support business efficiency. With this practical guide, chief information, data, and security officers will learn how to effectively implement and scale data governance throughout their organizations. You'll explore how to create a strategy and tooling to support the democratization of data and governance principles. Through good data governance, you can inspire customer trust, enable your organization to extract more value from data, and generate more-competitive offerings and improvements in customer experience. This book shows you how. Enable auditable legal and regulatory compliance with defined and agreed-upon data policies Employ better risk management Establish control and maintain visibility into your company's data assets, providing a competitive advantage Drive top-line revenue and cost savings when developing new products and services Implement your organization's people, processes, and tools to operationalize data trustworthiness.




Managing Information Assurance in Financial Services


Book Description

"This book provides high-quality research papers and industrial practice articles about information security in the financial service industry. It provides insight into current information security measures, including: technology, processes, and compliance from some of the leading researchers and practitioners in the field"--Provided by publisher.




A Librarian's Guide to ISO Standards for Information Governance, Privacy, and Security


Book Description

This book was written to demystify critical standards related to information security, records management privacy information management for the modern librarian and archival professional. In the digital age, librarians and archival professionals play a crucial role in safeguarding the world's knowledge. A Librarian's Guide to ISO Standards for Information Governance, Privacy, and Security is a curated resource for librarians, presenting core ISO standards related to information governance, data privacy, and security. The book provides detailed summaries of these standards, along with case studies and advice on applying them in the modern digital age. It empowers library staff and patrons to prioritize data security and privacy, ensuring trust and confidentiality in their services. The purpose is to demystify critical standards related to information security, records management privacy information management for the modern librarian and archival professional. Inside, you will find detailed summaries of the core ISO standards, descriptions, and case studies illustrating how these standards can apply to librarians in the modern digital age, advice on how to cultivate a culture of data security, and privacy awareness among library staff and patrons.




Integrated Assurance


Book Description

The need for assurance is never more acute than in times of turbulence and uncertainty. The events following the financial market crisis demonstrate the catastrophic consequence of risk taking that exceeds the board’s appetite, and of not joining up risk intelligence for sound decision making. Boards and senior management alike consistently seek the ’one truth’ about risk exposures and strength of controls but are continuing to grapple with the challenge. Much has been written about assurance and the governance of risks, but mainly by those who provide it - such as internal auditors, accountants and information security technologists - for the purpose of advancing their professional practices. Less is written for or by those in governance who need assurance for the effective discharge of their responsibilities. Regulations do not usually go beyond acknowledging its importance and rely on those in the boardroom to get it right. Studies have consistently shown the link between weak corporate governance and corporate failures. The lack of reliable assurance has often been a factor. Assurance, as an integral part of corporate governance, cannot be taken for granted. It requires conscious action across the organisation. It is time to rethink assurance beyond its usual functional boundaries, to focus on what matters to the business and how discussions in the board room can be better supported by more joined up assurance. This book provides practical guidance for those who need that support as well as those who deliver assurance.




Information Governance


Book Description

Proven and emerging strategies for addressing document and records management risk within the framework of information governance principles and best practices Information Governance (IG) is a rapidly emerging "super discipline" and is now being applied to electronic document and records management, email, social media, cloud computing, mobile computing, and, in fact, the management and output of information organization-wide. IG leverages information technologies to enforce policies, procedures and controls to manage information risk in compliance with legal and litigation demands, external regulatory requirements, and internal governance objectives. Information Governance: Concepts, Strategies, and Best Practices reveals how, and why, to utilize IG and leverage information technologies to control, monitor, and enforce information access and security policies. Written by one of the most recognized and published experts on information governance, including specialization in e-document security and electronic records management Provides big picture guidance on the imperative for information governance and best practice guidance on electronic document and records management Crucial advice and insights for compliance and risk managers, operations managers, corporate counsel, corporate records managers, legal administrators, information technology managers, archivists, knowledge managers, and information governance professionals IG sets the policies that control and manage the use of organizational information, including social media, mobile computing, cloud computing, email, instant messaging, and the use of e-documents and records. This extends to e-discovery planning and preparation. Information Governance: Concepts, Strategies, and Best Practices provides step-by-step guidance for developing information governance strategies and practices to manage risk in the use of electronic business documents and records.




IBM Information Governance Solutions


Book Description

Managing information within the enterprise has always been a vital and important task to support the day-to-day business operations and to enable analysis of that data for decision making to better manage and grow the business for improved profitability. To do all that, clearly the data must be accurate and organized so it is accessible and understandable to all who need it. That task has grown in importance as the volume of enterprise data has been growing significantly (analyst estimates of 40 - 50% growth per year are not uncommon) over the years. However, most of that data has been what we call "structured" data, which is the type that can fit neatly into rows and columns and be more easily analyzed. Now we are in the era of "big data." This significantly increases the volume of data available, but it is in a form called "unstructured" data. That is, data from sources that are not as easily organized, such as data from emails, spreadsheets, sensors, video, audio, and social media sites. There is valuable information in all that data but it calls for new processes to enable it to be analyzed. All this has brought with it a renewed and critical need to manage and organize that data with clarity of meaning, understandability, and interoperability. That is, you must be able to integrate this data when it is from within an enterprise but also importantly when it is from many different external sources. What is described here has been and is being done to varying extents. It is called "information governance." Governing this information however has proven to be challenging. But without governance, much of the data can be less useful and perhaps even used incorrectly, significantly impacting enterprise decision making. So we must also respect the needs for information security, consistency, and validity or else suffer the potential economic and legal consequences. Implementing sound governance practices needs to be an integral part of the information control in our organizations. This IBM® Redbooks® publication focuses on the building blocks of a solid governance program. It examines some familiar governance initiative scenarios, identifying how they underpin key governance initiatives, such as Master Data Management, Quality Management, Security and Privacy, and Information Lifecycle Management. IBM Information Management and Governance solutions provide a comprehensive suite to help organizations better understand and build their governance solutions. The book also identifies new and innovative approaches that are developed by IBM practice leaders that can help as you implement the foundation capabilities in your organizations.