This fully updated edition demonstrates how businesses can succeed in creating a new culture of information management compliance (IMC) by incorporating an IMC philosophy into a corporate governance structure. Expert advice and insight reveals the proven methodology that adopts the principles, controls, and discipline upon which many corporate compliance programs are built and explains how to apply this methodology to develop and implement IMC programs that anticipate problems and take advantage of opportunities. Plus, you'll learn how to measure information management compliance through the use of auditing and monitoring, following the proper delegation of program roles and components, and creating a culture of information management awareness.
Randolph A. Kahn is a recognized authority on the legal, compliance, and policy issues of information management. He is a consultant to Fortune 500 companies, government agencies, and court systems. Barclay T. Blair is a consultant to Fortune 500 companies, software and hardware vendors, and government agencies. He is a writer, speaker, and recognized authority on a broad range of information management compliance issues.
Introduction. I Laying the Foundations of Information Management Compliance. 1 Why Information Management Matters. 2 Building the Foundation: Defining Records. 3 An Overview of Records Management. 4 Information Management Compliance (IMC). 5 Achieving IMC: Introduction to the Seven Keys. 6 Sarbanes-Oxley and IMC. II Seven Keys to Information Management Compliance. Key #1 Good Policies and Procedures. 7 The Purpose of Policies and Procedures. 8 Making Good Policies and Procedures. 9 Information Management Policy Issues. Key #2 Executive-Level Program Responsibility. 10 Executive Leadership, Sine Qua Non. 11 What Executive Responsibility Means. 12 IT Leadership. Key #3 Proper Delegation of Program Roles and Components. 13 Create an Organizational Structure to Support IMC. 14 A Sample Information Management Organizational Structure. Key #4 Program Communication and Training. 15 Essential Elements of Information Management Communication and Training. Key #5 Auditing and Monitoring to Measure Program Compliance. 16 Use Auditing and Monitoring to Measure IMC. Key #6 Effective and Consistent Program Enforcement. 17 Addressing Employee Policy Violations. 18 Using Technology to Enforce Policy. Key #7 Continuous Program Improvement. 19 The Ongoing Work of IMC. Conclusion. Index.