INFORMATION

GOVERNANCE

BY Waqar ahmed

Information Governance 1
 WHAT IS
INFORMATION GOVERNANCE

 Information governance is the management

of information at an organization.
 Information governance balances the use and
security of information.
 Information governance helps with legal
compliance, operational transparency, and
reducing expenditures associated with legal
discovery.
 Types of Information
Confidential Personal Sensitive Anonymous
Personal

Racial/Ethnic origin
Name
Private Political/Religious No references
Information Beliefs or identifiers
Address /
about you
Postcode
Criminal Record
Information given to Date of Birth
someone who has a ID number Cannot be
Medical Records
duty of confidence matched to
Phone Numbers anyone
Date of Birth
Other- Bank, Salary
You expect it to be etc
Essentially
used in confidence
anything that Anything that Statistics rather
can identify could cause harm than detail
someone to a person or
their reputation
Version 0.1
Why is Information Governance important?

Information governance makes information more

accessible to those who need it, which is crucial for any
organization.
Organizations of all types and sizes often suffer from poor
organization and management of information assets,
leading to issues with accessibility, ease of use, timeliness
and security -- all of which governance can positively
affect.
 GOALS OF INFORMATION GOVERNANCE

Retention. Properly maintains and preserves records.

Compliance. Complies fully with all applicable laws and regulations.
Value. Gets the maximum value for the benefit of all stakeholders
Security. manages the risks of loss, intrusion, unauthorized use,
disclosure, modification, access, or destruction of records
Sustainability. Promotes practices that preserve integrity, authenticity,
and usability of records and data now and into the future
Integrity. Conducts business with honesty and integrity while serving
the public interest.
Privacy. Ensures compliance with privacy legal and ethical
considerations in the processing of personal data.
Information Governance 6
Information Governance 7
 Information Governance incorporates

 Information security and protection

 Data quality, 
 Data Governance
 Electronic Discovery
 Risk Management
 Privacy
 Data storage and Archiving
 Knowledge Management
Cont…
Business Operations And Management
Audit
Analytics
IT
Management
Master Data Management
Enterprise Architecture
Business Intelligence
Big Data
Data Science
Finance

Information Governance 9
INFORMATION LIFECYCLE

Information Governance 10
 INFORMATION LIFECYCLE

 Plan and design information appropriately 

 Create, capture and classify information adequately
 Store and secure information appropriately
 Manage and maintain information in line with external
and internal policies and expectations
 Share and reuse information where appropriate
 Retain and archive information for a minimum period
 Dispose off and destroy information correctly.
INFORMATION GOVERNANCE PLAN

Information Governance 12
 INFORMATION GOVERNANCE PLANS

 IG plans comply with data protection laws governing

the collection, use, storage, and transfer of
information worldwide.
 IG plans helps, operating in highly regulated industries
such as financial services, health care, pharma,
transportation, hospitality, and online retail.
 IG plans assess how data is accumulated and stored
and help establish an information management
framework .
 INFORMATION GOVERNANCE FRAMEWORKS
 Frameworks are built from the answers to some central
questions that apply to information of all types:
 What does this information mean?
 Who uses it?
 How is it created/where does it come from?
 What do users do with it?
 Who can access it?
 Why is it important?
 How long is it useful for?
 What other information depends upon this information?
Frameworks should define the following areas:

 Policy. overall corporate policies

 Process. how the policies are implemented.
 Roles and accountability. Who has ultimate
responsibility.
 Metrics. can track information quality.
 Compliance. legal and regulatory concerns to ensure.
 Disaster recovery
 Continuous monitoring. 
 Laws, regulations and principles
  INFORMATION GOVERNANCE PROGRAM
INFRASTRUCTURE
 An effective team working collaboratively in departments,
groups and functions such as IT, Privacy and Legal;
 A clear and appropriate policy or set of policies;
 A clear and well-defined retention schedule;
 Custodian assignment and identification;
 Effective tools and systems and processes to monitor and
manage changes;
 Effective training and awareness for all workers at the right
level about the program; and
 A well-defined process for issuing and managing records
holds 
 IG IN LIBRARY & INFORMATION SCIENCE
For quality information; keep all types of information: 
 Accurate
 Up to date
 Complete
 Quick and easy to find (ensure your filing systems are
easy to use)
 Free from duplication
 Free from fragmentation (stored together rather than
in individual files)
 Secure and only accessible to those authorised to
access it
Information Governance 17
 DATA GOVERNANCE FRAMEWORK TOOLS

 COLLIBRA

 TALEND

 IO-TAHOE

 IBM

 INFORMATICA

 WEB 3.0
 INFORMATION GOVERNANCE IN PAKISTAN

Pakistan Internet Exchange (PIE):

 By having an Internet Exchange Point (IXP),
a significant amount of traffic will remain local and
would not have to traverse International networks.
 This will help lower security breaches and also help
address any privacy concerns related to the
local traffic in Pakistan.
 IG Acts, Legislation, Guidance
and Codes of Practice
• The international information security standard:
ISO/27001
• The Human Rights Act article 8.
• Federal Freedom of Information Ordinance (26 Oct
2002)
• Right to information and Freedom of Information
Law by 18th Amendment (2010) ,Article 19A of 1973
constitution of Pakistan.
• Right to Information Act ,2013.
• The Baluchistan Freedom of Information act, 2005,

Information Governance 20
Cont.....
 The Sindh Transparency and right to Information
Act ,2017.
• The Punjab Transparency and right to Information
Act, 2013.
• The KPK right to Information Act, 2013.
• Cyber Crime Bill 2007
• Prevention of Electronic Crime Act (PECA) 2016.
• National Cyber Security Policy – 2021 ,by
recommendations of Cyber Governance Policy
Committee (CGPC).
• Pakistan Telecommunication Act 1996.
Information Governance 21
Any question
Information Governance 22