Information Governance Policy

Running head: INFORMATION GOVERNANCE POLICY
INFORMATION GOVERNANCE POLICY
Name of the Student
Name of the University
Author Note

INFORMATION GOVERNANCE POLICY 1
Scope:
Information Governance is the maintenance and establishment of the controlling
environment for managing the risks that are related to the integrity, availability of the
information, confidentiality and supporting systems and processes of it. The information
Governance is all of the tools personnel, tools as well as the business processes which ensure
that the security is being carried out for meeting the specific needs of an organization. The
structure of the organization, performance measurement, responsibilities and roles, oversight
mechanisms and defined tasks (De et al., 2013). The white paper that is provided from the
Institute of the IT Governance, define that the Information Governance is the set of practices
exercises and responsibilities by the executive and board management with the target of
providing direction that is strategic and also ensuring that all the objectives are achieved,
determining that the risks have been managed appropriately as well as verifying that the
resources of the enterprise are responsibly used.
Roles and responsibilities:
Information governance committee:
The committee is responsible ultimately to ensure that if it meets the legalization or
not. The key executives will from the committee, as the committee must be multi-disciplined
in nature. This committee plays a key role in protection of data foresting (Caldicott, 2013).
The committee will also ensure that the means of processing and purposes of personal data
for that the organization is determined and data controller in the compliance with the
legislation.
Employees:
The employees will have to be responsible for managing information that they create
(Epstein, 2013). The role of the employees is that they have to implement the policies and

2INFORMATION GOVERNANCE POLICY
practices of information governance. In addition they have to implement authorization and
security of the information.
Line managers:
The line managers are responsible for ensuring that the employees of the organization
are made aware of the particular responsibilities of them as well as the employees are
complying with data protection that is associated and information governance policies,
information management and information security.
Information governance team:
The information governance team is a dedicated team for driving the practical
implementation of the policy, where the roles and responsibilities of the team should be
stated clearly.
Information risk management:
The information risk management is one of the most important element of the
information governance. It will include establish a team information risk, a risk owner who is
senior and monitoring, enforcing and creating information risk procedure and policies.
Records manager:
The record manager is one more key area of the information governance. This
framework will extend the information for that the manager is responsible.
Information asset management:
The information asset management ensures that the assets of information are managed
with the information governance framework, the role of the assets owners is to manage and
identify risks of data protection within the respective units of business of them.