17
22 February 2010 The Effective eDocument Retention Program Policies, Processes and Solutions

The Effective eDocument Retention Program - Policies, Processes and Solutions

  • Upload
    ledjit

  • View
    577

  • Download
    0

Embed Size (px)

DESCRIPTION

 

Citation preview

Page 1: The Effective eDocument Retention Program - Policies, Processes and Solutions

22 February 2010

The Effective eDocument RetentionProgram

Policies, Processes and Solutions

Page 2: The Effective eDocument Retention Program - Policies, Processes and Solutions

Presenters:

Page 3: The Effective eDocument Retention Program - Policies, Processes and Solutions

A Gartner Perspective“ The December 2006 amendments to the Federal Rules of Civil

Procedure (FRCP) in the U.S. regarding the discovery of ESI and passing of subsequent similar statutes in other countries, has really spurred market interest in e-discovery. This is prompting many companies to rethink their overall information management strategies, from the policy level to the implementation level.”

The three core market catalysts are: Transparency of business performance as aligned to governance, risk &

compliance regulations and subsequent organizational reporting. Mitigating IT risk through the use of real-time and continuous controls

monitoring for transactions, segregation of duties, application configuration and master data.

Preventing business failure through fraud detection, improved user-level and application-level security and corruption.

Gartner Research VP Tom Eid, Press Release 16 December 2009

3

Page 4: The Effective eDocument Retention Program - Policies, Processes and Solutions

eDocuments?eDocuments

Information & Records

Decisions

Actions

Records

Media independentTypically

Email

Structured

Unstructured

4

Page 5: The Effective eDocument Retention Program - Policies, Processes and Solutions

Considering a Retention Program?

5

The COSO framework involves several key concepts:

Internal control is a process. It is a means to an end, not an end in itself. Internal control is affected by people. It’s not merely policy, manuals, and forms, but people at every level of an organization. Internal control can be expected to provide only reasonable assurance, not absolute assurance, to an entity’s management and board. Internal control is geared to the achievement of objectives in one or more separate but overlapping categories.

Page 6: The Effective eDocument Retention Program - Policies, Processes and Solutions

Key Drivers

6

Regulatory

Industry

Business Need

Page 7: The Effective eDocument Retention Program - Policies, Processes and Solutions

Key PlayersRisk Management

Legal

IT

Business

Financial

7

Page 8: The Effective eDocument Retention Program - Policies, Processes and Solutions

Primary ChallengesLack of clear Ownership

“Why not just keep everything? Storage is cheap!”

Not a “sexy” initiative!

8

Page 9: The Effective eDocument Retention Program - Policies, Processes and Solutions

Today’s Typical eDocument Landscape

PRIVILEGED 9

Loosely related PoliciesMultitude of SystemsUncommon Taxonomy

Email

SAP

Network Shared Drives

Sharepoint

Legal MMS

Sales

SaaSHRMS

Internet

Page 10: The Effective eDocument Retention Program - Policies, Processes and Solutions

Unlocking the Value IT Investment

Structured

Unstructured

Info Value & Risk

UnstructuredStructured

10

Page 11: The Effective eDocument Retention Program - Policies, Processes and Solutions

Know What Your eDocuments your Organization Has?

Know where and how to get them?

Know the cost of keeping them?

11DRAFT - PRIVILEGED

Do You?

Page 12: The Effective eDocument Retention Program - Policies, Processes and Solutions

DRAFT - PRIVILEGED 12

Loosely related Policies

Multitude of SystemsUncommon Taxonomy

Creating the Structure

Information Assets

Corporate Records and Information Management Framework

Information Policies

Page 13: The Effective eDocument Retention Program - Policies, Processes and Solutions

Information as an AssetRisks

Value

Management Effort and Approaches

13

Information Assets

Corporate Records and Information Management Framework

Information Policies

Page 14: The Effective eDocument Retention Program - Policies, Processes and Solutions

Systematizing InformationComplex – DMS

EMC OpentextIBM

Simple – CollaborationSharepointLotus Notes

14

Information Assets

Corporate Records and Information Management Framework

Information Policies

Page 15: The Effective eDocument Retention Program - Policies, Processes and Solutions

Corporate Records and IM Framework

GovernanceOrganizational Priority & Visibility

CultureEmployees empowered and involved

InfrastructureLinkages between GC, CIO, CRO

15

Information Assets

Corporate Records and Information Management Framework

Information Policies

Page 16: The Effective eDocument Retention Program - Policies, Processes and Solutions

Key Information PoliciesRetention

Defines What, Who, How Long

DestructionDefines How

Legal HoldDefines the means to interrupt and prevent destruction

16

Information Assets

Corporate Records and Information Management Framework

Information Policies

Page 17: The Effective eDocument Retention Program - Policies, Processes and Solutions

Questions?

17