Role of Information Governance and Security in Tesco Plc

Information
Management
Assessment

Table of Contents
INTRODUCTION...........................................................................................................................3
TASK 1............................................................................................................................................3
Literature review and critical discussion of the concepts of Information Governance,
Information Security...............................................................................................................3
TASK 2............................................................................................................................................6
Critically discuss the role and responsibilities of senior leadership in information governance
in the context of Procter and Gamble (P&G).........................................................................6
TASK 3............................................................................................................................................8
Critical analysis of use of information systems and information technology and how this
impacts on staff development, effective flow of communication, and decision making in the
chosen organisation................................................................................................................8
TASK 4..........................................................................................................................................10
Critically evaluate possible improvements to the organisation’s use of information systems
with emphasis on staff development in line with organisational goals, effective flows of
communication, and decision making in the chosen organisation.......................................10
TASK 5..........................................................................................................................................12
Critically analyse the importance of security in information management in your organisation.
..............................................................................................................................................12
CONCLUSION..............................................................................................................................14
REFERENCES..............................................................................................................................15

INTRODUCTION
Information management refers to the process and systems which is adopted by the
management of company in order to create, acquire, organise, manage and distribute the
information or data available with the entity and denoted as a resource for it. Information today
can be stored in two most common ways electronically and physically (Shi and et. al., 2016). The
process of information management is a systematic way of collecting and managing all the data
within the organisation and making sure to use it in the most productive manner possible. The
assignment is made over Tesco Plc a leading organisation in retail sector offering number of
products and services to potential buyers. Tesco Plc was found in 1919 by Jack Cohen as a small
shop but with growth and development now Tesco is a leading brand around the world and
headquartered in United Kingdom. The company do take up several information management
systems to manage the data available internally and externally to the entity. In the beginning of
the report a literature review is presented on Information Governance and Information Security.
Then the roles and responsibilities of top management in regards to information governance will
be discussed by taking consideration of the case study of Procter and Gamble (P&G). Moreover,
evaluation of the information system and security on the staff and other related elements of the
entity is made. Moving along, certain improvements are suggested to the organisation in regards
to use of information systems within the company keeping in concentration to staff development,
goals of company, effective communication flow and many more. Lastly, in the assignment
importance of security and safety in information management for the company are elaborated.
TASK 1
Literature review and critical discussion of the concepts of Information Governance, Information
Security.
Information Security
According to the Charlie D. Costa (2019) the information security is the protection of the
data against any unauthorised practice. The information security is a mitigation measure taken to
protect the online data (Fu, Han and Huo, 2017). With the digitalisation of activities it is
required that the safety and security is being maintained of the data. The common types of
attacks faced in information system are as following;

 Malware attacks- The malware practices are the software which destroys the computer
and affects the working of the computers. The common types of malware attacks are such
as viruses, spyware, Trojan virus etc. Once they enter the system the hacker can keep
constant eye on the system and destroy it. Therefore, it is required that the constant
scanning of any viruses should be scanned. The antivirus so developed today address
easily the gauge in the system. Phishing- This practice refers to the collection of personal information targetting
thorough the emails. This is the common practice in which the hacker creates the fake
mails and says to tap on some link to claim prize and clicking through on it gets the
system hacked through. This way they collect the personal information ans use it to their
advantage (Rosenblat and Stark, 2016). Hacking- The hacking is done with the purpose of collecting the personal data. The
information so collected is used by hacker for some misleading purpose and it leads the
disturbance in whole system.
 Cyber stalking- It is new from of harming the person it includes the the stalking of the
online activities of the user. The intender then uses it fro the purpose of intending his
benefit by tracking the personal information. It is most commonly increasing practice
used by the persons to harness one's personal information.
These are the most commonly used malpractices used by the hacker to enter into one's
personal information. There are endless cases of cyber crimes increasing these days, the IT
department aim is to increase the education and awareness. Tesco, should provide to every
employee with the training required for the management of information security. It is integral
part of organisation as all the sensitive information is stored digitally now. Therefore, the
security is in hand of organisation to protect its data. The Tesco, should install the system to
upgrade antivirus software for enhanced security. The government, of every country has made
separate laws of cyber department to efficiently conduct them. The cyber department is held
responsible for handling the issues related to cyber crimes and educate the people about cyber
knowledge. The Tesco has separate IT functional department which keeps checking the updates
and maintains the integrity of system. The importance of information security for workplace
includes following benefits;