information governance approach and best practices … · information governance approach and best...
TRANSCRIPT
Veritas Solution Day 2016
INFORMATION GOVERNANCE APPROACH AND BEST PRACTICES
Chris Park
Global Practice Lead, Information GovernanceHead of APJ Advisory Team
Copyright © 2015 Veritas Technologies LLC
1 INTRODUCTION TO INFORMATION GOVERNANCE
2 INFORMATION GOVERNANCE BEST PRACTICES
3 VERITAS INFORMATION GOVERNANCE PROGRAM
4 QUESTIONS & ANSWERS
2
AGENDA
Veritas Solution Day 2016
1. INTRODUCTION TO INFORMATION GOVERNANCE
Copyright © 2015 Veritas Technologies LLC3
FOCUSING ON INFORMATION
Copyright © 2016 Veritas Technologies LLC5
CDO 25%OF LARGE ORGANIZATIONS WILL HAVE APPOINTED A CDO BY 2015.CHIEF DATA OFFICER
6%MORE PROFITABLE
ORGANIZATIONS WHO USE INFORMATION-BASED DECISION MAKING ARE:
5%MORE PRODUCTIVE
69%NO LEAGL ORBUSINESS VALUE
- Harvard Business Review
…it can be seen as part of the
continued re-casting
(or rediscovery?) of IT as
information technology rather
than infrastructure technology.”
“
- Mark PetersSr. Analyst
1.5% OF THE OVERALL DATA IN EXISTENCE IS “TARGET-RICH” DATA
Copyright © 2016 Veritas Technologies LLC6
WHAT IS INFORMATION GOVERNANCE?
A SET OF MECHANISMS AND PRACTICESDESIRABLE BEHAVIORTHAT ENCOURAGE
IN THE USE AND MANAGEMENT OF INFORMATIONIN ENABLING ORGANIZATIONS
TO MAXIMIZE THE VALUE OF INFORMATIONWHILE MINIMIZING ASSOCIATED RISKS
VERITAS, 2015
Copyright © 2016 Veritas Technologies LLC7
Information Governance Committee
Data Protection
Collaboration
Retention
SLAData Intelligence
Regulations
Classification
Information Lifecycle Management
Information Intelligence
Chief Information Governance Officer
WHAT ARE INFORMATION GOVERNANCE MECHANISMS ?
Chief Data Officer
Strategy & Framework
Sponsorship
Record ManagementAccess Management
E-Discovery
Data Storing & Archiving
Knowledge Management System
Analytics
Document Management DashboardCompliance Reporting
Access Monitoring
Information Governance Strategy and OrganizationSponsorship, Awareness, Compliance, Governance Leadership, Data Intelligence
Information Governance ProcessInformation Lifecycle, Process, Policy, Security, Record Management, Retention
Information Governance TechnologyData Storing & Archiving, E-Discovery, Access Monitoring, File Analytics, KMS
BIG DATA
Custodial
Veritas Solution Day 2016
2. INFORMATION GOVERNANCE BEST PRACTICES
Copyright © 2015 Veritas Technologies LLC8
Copyright © 2016 Veritas Technologies LLC9
CASE 1: GAINING VISIBILITY INTO INFORMATION
• Leading Heavy Industries Conglomerate in Asia
• IG Issues in this organization were:– Rapid growth of data and storage & operational spend while IT budget pressure from Mgmt.
– After shared service model was introduced, IT leadership found the lack of visibility into information what they had during SLA/OLA contract conversation
• How Veritas helped the customer on this:– Analyzed AS-IS data posture using Veritas Information Intelligence
– Investigated behavior risk and access pattern with multiple angles
– Cleaned-up stale, orphaned and duplicated data
• Outcomes and Lessons Learned:– 15% storage saving (estimation) and having a clear view on their information
– Gain visibility into what information you have and where it is and what does it mean to the organization & business
– Leverage Information Intelligence actively for organizational adaption and awareness
Copyright © 2016 Veritas Technologies LLC10
• Information Intelligence provides decision making information on Information Governance issues through practical mechanisms.
• The Contents of Information Intelligence includes:1. Data Posture by Gathering Information
2. Implications of Facts
3. Recommendations by Analysis
WHAT IS INFORMATION INTELLIGENCE?
DATA POSTURE BY GATHERING
<GRAPH> ONE OF EXAMPLES OF DATA POSTURE
Copyright © 2016 Veritas Technologies LLC11
WHAT IS INFORMATION INTELLIGENCE?
IMPLICATIONS OF FACTS
RECOMMENDATIONS BY ANALYSIS
Copyright © 2016 Veritas Technologies LLC12
CASE 2: COMPLYING WITH COMPLIANCE LEVERAGING IG PRACTICES
• Global Leading Finance Group
• IG Issue in this organization was:– Data Protection regulation requirements
– Various Recordkeeping requirements
• How Veritas helped the customer on this:– Delivered consulting service on Compliance using IG model & practices
– Revised information Classification policy and retention schedules and Enforced IG policies by automation
• Outcomes and Lessons Learned (ongoing):– Comply with various compliance requirements leveraging comprehensive Information Governance model and practices,
not just for specific regulation only but for overall compliance and business requirements.
– Especially, MNCs are highly recommended to build strong process to ensure complying with various regulations and guidelines across GEOs and regions continuously
– Improved IT Operation efficiency by building corporate-wide standard information classification and retention policies
Copyright © 2016 Veritas Technologies LLC13
CASE 3: INCREASING ORGANIZATION'S CAPABILITY OF IG
• Leading Finance Group
• IG Issues in this organization were:– No designated executive who is responsible for corporate wide information risks and governance issue
– Already IG policies and procedures in place but not constantly enforced
– Lack of Executive Sponsorship
• How Veritas helped the customer on this:– Provided advices on building corporate wide IG committee
– Provided a recommendation on Chief IG officer position with proper R&R and collaboration model with BUs and IT
– Advice on Information Governance Awareness program
• Outcomes and Lessons Learned:– IG is becoming a strategic initiative with sponsorship in this organization
– Formed consensus among key stakeholders to create chief IG officer role
– Leverage compelling and critical business events to gain sponsorship
Veritas Solution Day 2016
3. VERITAS INFORMATION GOVERNANCE PRACTICES
Copyright © 2015 Veritas Technologies LLC14
Copyright © 2016 Veritas Technologies LLC15 15
UNYIELDING BELIEF: VALUE OF INFORMATIONThe amount of Information value does not depend on how much of Data the organizations keep and store. And the organizations are recognizing that additional infrastructure does not address the issue.
TACTIC: PRACTICAL method based on detail and specific practices is crucial part of successful implementation of information governance. Without practicality based on real-world experiences, Information governance can not be implemented successfully in the organization.
STRATEGY: HOLISTIC approach is the key to solve various information governance issues. Information governance Process, policy, strategy as well as technology should be addressed together. Also the cooperation with various teams within IT and Business is the critical success factor.
VERITAS APPROACH TO INFORMATION GOVERNANCE
Comprehensive IG Model with Practical Mechanisms
• Information Governance Strategy:– Sponsorship, Data Intelligence, IG Architecture, Committee
• Organization & People:– R&R, Data Ownership, Collaboration, Awareness, Skillset
• Information Lifecycle Management:– Process, Policy, Retention, Classification, Record Management
• Security & Compliance:– Access Control, Data Protection, Privacy, Supervision, Regulation
• Information Governance Technology:– Backup and Restore, E-discovery, Archiving, File analysis, KMS
VERITAS INFORMATION GOVERNANCE MODEL
<FIGURE> VERITAS INFORMATION GOVERNANCE MODEL
Copyright © 2016 Veritas Technologies LLC16
Copyright © 2016 Veritas Technologies LLC17
VERITAS INFORMATION GOVERNANCE MATURITY MODEL
• VERITAS consultants utilize Information Management Capability Maturity model: – It provides 5 levels of evaluation
– With Real-world practices
• Based on Comprehensive Global practices:– COBIT 5
– ITIL v3
– ISO 38500:2008
– ISO 27001:2013
– BS 25999
– Risk Management
– Record Management Practices
– IT and Information Governance mechanisms
– And VERITAS Best Practices
<FIGURE> VERITAS INFORMATION GOVERNANCE MATURITY MODEL
Copyright © 2016 Veritas Technologies LLC18
• Comprehensive and consultative engagement intended to:– Evaluate the maturity of the client’s Information Governance against the framework
– Identify the Gap and the desired state of Information Governance capabilities
– Develop and Prioritize Blue Print / Roadmap for achieving information governance goals
• Target audiences are:– CIO, CRO, CDO, CSO and Head of Information Governance
– Business Units, Legal, EA
• Conducted in a series of:– Interview Sessions
– Documents Review
– System Review
• Present 3 different types of program:
– Standard Assessment (6 weeks)
– Quick Assessment (1 week)
– Discovery Workshop (Half day)
VERITAS INFORMATION GOVERNANCE ADVISORY PROGRAM
Copyright © 2016 Veritas Technologies LLC19
START SMALL
“Information Governance is a long journey. We strongly recommend the phased approach rather than big bang approach. Start small with quick-win project to demonstrate the practical value of IG.”
IDENTIFY AS-IS AND DESIRED STATE“It is crucial part of successful IG for all key stakeholders to know where the organization is now and where they want to be considering business requirements and industry benchmarking data.”
MEET THE ADVISOR“The implementation of successful Information Governance requires a border range of experience. Use outside advisor who have wide experience and expertise based on IG Best Practices.”
KEY TAKEAWAYS
Copyright © 2016 Veritas Technologies LLC20
• VERITAS is the No. 1 Expert of Information Management in the world
• 30+ years of experiences in managing information:– We continue to build on the capabilities established during our 30+ years of experience in Information Management
• IG Advisory Team with Avg. 15~20+ years experiences:– We are well-versed in Information Governance Technology. At the same time we are also highly proficient in process
and strategy related to Information Governance. More importantly, we are able to feasibly align them together.
• Comprehensive Framework and practical experience of Information Governance
• Best-in-class products and service in Information Governance
WHY VERITAS IN INFORMATION GOVERNANCE?
ありがとうございました!
Copyright © 2016 Veritas Technologies LLC. All rights reserved. Veritas and the Veritas Logo are trademarks or registered trademarks of Veritas Technologies LLC or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners.
This document is provided for informational purposes only and is not intended as advertising. All warranties relating to the information in this document, either express or implied, are disclaimed to the maximum extent allowed by law. The information in this document is subject to change without notice.
Veritas Solution Day 2016
Chris Park
[email protected]+65.9646.6513