Developing an Information Governance Policy for Ryz Digital Solutions

This document presents an information governance policy developed for Ryz Digital Solutions, focusing on protecting the organization's data assets and client information. The policy outlines the scope, objectives, and purpose of information governance, emphasizing the importance of minimizing data threats and breaches. It details the organization's approach to information governance, including procedures and staff guidance, and defines responsibilities and accountabilities for policy implementation. The policy is slated for regular review to address emerging threats and ensure the ongoing security of the organization's information assets. Desklib provides access to this document and many other solved assignments for students.

Information Governance policy
[Ryz Digital solutions]
[1.06.2018]
1. Introduction
Information is a vital asset for the organization in terms of project development and in
terms of offering different services to the clients of Ryz Digital Solutions. It plays a
key part in governance, service planning and performance management. It is therefore
very necessary to properly manage the information asset of the organization.
Furthermore it is necessary for the company to provide services to its clients in a
secure manner and therefore, the company needs to develop and implement a good
governance policy to protect the data produced by the company from different cyber
security threats.
1.1 Scope
The information governance policy of the organization is to address the present
information asset of the company including the client data stored in the information
system of Ryz Digital Solution. This is required to set up certain policies and
procedures that will ensure secure use and handling of the confidential data associated
with the organization.
1.2 Objectives
The main objective of enforcing an information security policy in Ryz Digital
solutions is to minimize the risks of data threat and data breach. The information
Policy will ensure that the data stored in the information system will maintain its
integrity and confidentially. The enforcement of the information policy is expected to
minimize the risk of unauthorized data access, accidental threats, insider threats and
external threats associated with the storage and use of confidential data of the
organization.
2. Purpose of the policy
The purpose of this policy is to outline the process by which Ryz Digital Solution will
manage protect, store and use its data in order to perform the associated business
operation in a secure manner. The main purpose of development of a data government
policy is to provide a guide for protection of the present data of the company against
the internal and the external threats such as breach of privacy and confidentiality.
3. The organisation’s approach to Information Governance
Ryz Digital Solutions undertakes to implement information governance effectively and will
ensure the following:
1.
2.
3.
4.
5.
6.
Information Governance policy Page 1 of 3

4. Procedures in use in the organisation
This Information Governance policy is underpinned by the following procedures:
1.
2.
3.
4.
5.
6.
Staff guidance in use in the organisation
Staff compliance with the procedures is supported by the following guidance material:
1.
2.
3.
4.
5.
6.
5. Responsibilities and accountabilities
The designated Information Governance lead for the organisation Ryz Digital solutions
Is discussed below-
The key responsibilities of the lead are:
1.
2.
3.
4.
5.
6.
The day to day responsibilities for providing guidance to staff will be undertaken by
owner of the organization.
The owner of the organization will ensure that sufficient resources are allocated for
effective implementation of the information governance policy. All the staffs of the
organization, be it permanent or temporary will have to comply with the guidelines of
the policy.
The information policy to be enforced in Ryz Digital solutions will be reviewed every
six months in order to analyze whether the information assets of the organization is
exposed to any new threats.
Information Governance policy Page 2 of 3

6. Approval
This policy has been approved by the undersigned and will be reviewed on an annual basis.
Name
Date approved
Review date
Information Governance policy Page 3 of 3