information governance approach and best practices … · information governance approach and best...

Veritas Solution Day 2016

INFORMATION GOVERNANCE APPROACH AND BEST PRACTICES

Chris Park

Global Practice Lead, Information GovernanceHead of APJ Advisory Team

Copyright © 2015 Veritas Technologies LLC

1 INTRODUCTION TO INFORMATION GOVERNANCE

2 INFORMATION GOVERNANCE BEST PRACTICES

3 VERITAS INFORMATION GOVERNANCE PROGRAM

4 QUESTIONS & ANSWERS

2

AGENDA


1. INTRODUCTION TO INFORMATION GOVERNANCE

Copyright © 2015 Veritas Technologies LLC3

INFORMATION CHALLENGES


FOCUSING ON INFORMATION


CDO 25%OF LARGE ORGANIZATIONS WILL HAVE APPOINTED A CDO BY 2015.CHIEF DATA OFFICER

6%MORE PROFITABLE

ORGANIZATIONS WHO USE INFORMATION-BASED DECISION MAKING ARE:

5%MORE PRODUCTIVE

69%NO LEAGL ORBUSINESS VALUE

- Harvard Business Review

…it can be seen as part of the

continued re-casting

(or rediscovery?) of IT as

information technology rather

than infrastructure technology.”

“

- Mark PetersSr. Analyst

1.5% OF THE OVERALL DATA IN EXISTENCE IS “TARGET-RICH” DATA


WHAT IS INFORMATION GOVERNANCE?

A SET OF MECHANISMS AND PRACTICESDESIRABLE BEHAVIORTHAT ENCOURAGE

IN THE USE AND MANAGEMENT OF INFORMATIONIN ENABLING ORGANIZATIONS

TO MAXIMIZE THE VALUE OF INFORMATIONWHILE MINIMIZING ASSOCIATED RISKS

VERITAS, 2015


Information Governance Committee

Data Protection

Collaboration

Retention

SLAData Intelligence

Regulations

Classification

Information Lifecycle Management

Information Intelligence

Chief Information Governance Officer

WHAT ARE INFORMATION GOVERNANCE MECHANISMS ?

Chief Data Officer

Strategy & Framework

Sponsorship

Record ManagementAccess Management

E-Discovery

Data Storing & Archiving

Knowledge Management System

Analytics

Document Management DashboardCompliance Reporting

Access Monitoring

Information Governance Strategy and OrganizationSponsorship, Awareness, Compliance, Governance Leadership, Data Intelligence

Information Governance ProcessInformation Lifecycle, Process, Policy, Security, Record Management, Retention

Information Governance TechnologyData Storing & Archiving, E-Discovery, Access Monitoring, File Analytics, KMS

BIG DATA

Custodial


2. INFORMATION GOVERNANCE BEST PRACTICES



CASE 1: GAINING VISIBILITY INTO INFORMATION

• Leading Heavy Industries Conglomerate in Asia

• IG Issues in this organization were:– Rapid growth of data and storage & operational spend while IT budget pressure from Mgmt.

– After shared service model was introduced, IT leadership found the lack of visibility into information what they had during SLA/OLA contract conversation

• How Veritas helped the customer on this:– Analyzed AS-IS data posture using Veritas Information Intelligence

– Investigated behavior risk and access pattern with multiple angles

– Cleaned-up stale, orphaned and duplicated data

• Outcomes and Lessons Learned:– 15% storage saving (estimation) and having a clear view on their information

– Gain visibility into what information you have and where it is and what does it mean to the organization & business

– Leverage Information Intelligence actively for organizational adaption and awareness


• Information Intelligence provides decision making information on Information Governance issues through practical mechanisms.

• The Contents of Information Intelligence includes:1. Data Posture by Gathering Information

2. Implications of Facts

3. Recommendations by Analysis

WHAT IS INFORMATION INTELLIGENCE?

DATA POSTURE BY GATHERING

<GRAPH> ONE OF EXAMPLES OF DATA POSTURE


WHAT IS INFORMATION INTELLIGENCE?

IMPLICATIONS OF FACTS

RECOMMENDATIONS BY ANALYSIS


CASE 2: COMPLYING WITH COMPLIANCE LEVERAGING IG PRACTICES

• Global Leading Finance Group

• IG Issue in this organization was:– Data Protection regulation requirements

– Various Recordkeeping requirements

• How Veritas helped the customer on this:– Delivered consulting service on Compliance using IG model & practices

– Revised information Classification policy and retention schedules and Enforced IG policies by automation

• Outcomes and Lessons Learned (ongoing):– Comply with various compliance requirements leveraging comprehensive Information Governance model and practices,

not just for specific regulation only but for overall compliance and business requirements.

– Especially, MNCs are highly recommended to build strong process to ensure complying with various regulations and guidelines across GEOs and regions continuously

– Improved IT Operation efficiency by building corporate-wide standard information classification and retention policies


CASE 3: INCREASING ORGANIZATION'S CAPABILITY OF IG

• Leading Finance Group

• IG Issues in this organization were:– No designated executive who is responsible for corporate wide information risks and governance issue

– Already IG policies and procedures in place but not constantly enforced

– Lack of Executive Sponsorship

• How Veritas helped the customer on this:– Provided advices on building corporate wide IG committee

– Provided a recommendation on Chief IG officer position with proper R&R and collaboration model with BUs and IT

– Advice on Information Governance Awareness program

• Outcomes and Lessons Learned:– IG is becoming a strategic initiative with sponsorship in this organization

– Formed consensus among key stakeholders to create chief IG officer role

– Leverage compelling and critical business events to gain sponsorship


3. VERITAS INFORMATION GOVERNANCE PRACTICES


Copyright © 2016 Veritas Technologies LLC15 15

UNYIELDING BELIEF: VALUE OF INFORMATIONThe amount of Information value does not depend on how much of Data the organizations keep and store. And the organizations are recognizing that additional infrastructure does not address the issue.

TACTIC: PRACTICAL method based on detail and specific practices is crucial part of successful implementation of information governance. Without practicality based on real-world experiences, Information governance can not be implemented successfully in the organization.

STRATEGY: HOLISTIC approach is the key to solve various information governance issues. Information governance Process, policy, strategy as well as technology should be addressed together. Also the cooperation with various teams within IT and Business is the critical success factor.

VERITAS APPROACH TO INFORMATION GOVERNANCE

Comprehensive IG Model with Practical Mechanisms

• Information Governance Strategy:– Sponsorship, Data Intelligence, IG Architecture, Committee

• Organization & People:– R&R, Data Ownership, Collaboration, Awareness, Skillset

• Information Lifecycle Management:– Process, Policy, Retention, Classification, Record Management

• Security & Compliance:– Access Control, Data Protection, Privacy, Supervision, Regulation

• Information Governance Technology:– Backup and Restore, E-discovery, Archiving, File analysis, KMS

VERITAS INFORMATION GOVERNANCE MODEL

<FIGURE> VERITAS INFORMATION GOVERNANCE MODEL



VERITAS INFORMATION GOVERNANCE MATURITY MODEL

• VERITAS consultants utilize Information Management Capability Maturity model: – It provides 5 levels of evaluation

– With Real-world practices

• Based on Comprehensive Global practices:– COBIT 5

– ITIL v3

– ISO 38500:2008

– ISO 27001:2013

– BS 25999

– Risk Management

– Record Management Practices

– IT and Information Governance mechanisms

– And VERITAS Best Practices

<FIGURE> VERITAS INFORMATION GOVERNANCE MATURITY MODEL


• Comprehensive and consultative engagement intended to:– Evaluate the maturity of the client’s Information Governance against the framework

– Identify the Gap and the desired state of Information Governance capabilities

– Develop and Prioritize Blue Print / Roadmap for achieving information governance goals

• Target audiences are:– CIO, CRO, CDO, CSO and Head of Information Governance

– Business Units, Legal, EA

• Conducted in a series of:– Interview Sessions

– Documents Review

– System Review

• Present 3 different types of program:

– Standard Assessment (6 weeks)

– Quick Assessment (1 week)

– Discovery Workshop (Half day)

VERITAS INFORMATION GOVERNANCE ADVISORY PROGRAM


START SMALL

“Information Governance is a long journey. We strongly recommend the phased approach rather than big bang approach. Start small with quick-win project to demonstrate the practical value of IG.”

IDENTIFY AS-IS AND DESIRED STATE“It is crucial part of successful IG for all key stakeholders to know where the organization is now and where they want to be considering business requirements and industry benchmarking data.”

MEET THE ADVISOR“The implementation of successful Information Governance requires a border range of experience. Use outside advisor who have wide experience and expertise based on IG Best Practices.”

KEY TAKEAWAYS


• VERITAS is the No. 1 Expert of Information Management in the world

• 30+ years of experiences in managing information:– We continue to build on the capabilities established during our 30+ years of experience in Information Management

• IG Advisory Team with Avg. 15~20+ years experiences:– We are well-versed in Information Governance Technology. At the same time we are also highly proficient in process

and strategy related to Information Governance. More importantly, we are able to feasibly align them together.

• Comprehensive Framework and practical experience of Information Governance

• Best-in-class products and service in Information Governance

WHY VERITAS IN INFORMATION GOVERNANCE?

ありがとうございました!

Copyright © 2016 Veritas Technologies LLC. All rights reserved. Veritas and the Veritas Logo are trademarks or registered trademarks of Veritas Technologies LLC or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners.

This document is provided for informational purposes only and is not intended as advertising. All warranties relating to the information in this document, either express or implied, are disclaimed to the maximum extent allowed by law. The information in this document is subject to change without notice.


Chris Park

[email protected]+65.9646.6513