Skip to content

Discerning Data

  • About Us
  • Additional Resources
  • Contact Us

DISCERNING DATA

A Faegre Drinker Blog Covering the Latest in Privacy, Cybersecurity and Data Strategy

  • Privacy
  • Cybersecurity
  • Data Strategy
  • Disruptionware

Drafting an Information Governance Program Charter

Share

This is the second in an occasional series of blog posts providing practical guidance on how to create an information governance program and how successfully to execute on specific information governance projects.

In our first blog post in this series, we discussed managing share drives and getting rid of redundant, outdated and/or trivial information, otherwise known as “ROT.” Today, we will focus on the essential elements of an Information Governance Charter.

Information Governance (IG) can be an abstract concept for an organization to get its arms around. To contextualize IG, a 2015 Information Governance Initiative (IGI) Benchmarking report included one-on-one interviews with people actively working on projects that they themselves identified as part of an information governance program. Consider this individual’s experience at a pharmaceutical company with more than 10,000 employees:

When Mary joined the company just a few years ago, there was no IG program. She came in with the idea of consolidating RIM [records and information management], privacy, compliance, security, human resources, and finance into an IG group. What she found was a common problem practitioners face when beginning an IG program— some of the facets of IG were immature or missing.

According to Mary, privacy and RIM were immature, lacking important foundational program elements, and some regional operations were missing key facets of IG altogether. She did not think she could move forward with a more comprehensive program without getting a solid foundation in place first, so she spent the first two years developing those basic functions and building her team.

Today, Mary’s company is in the process of building an IG council (or steering committee), writing its charter, developing a decision-making structure, and setting IG priorities. Mary could not have made this progress without building a solid foundation first.

An IG Charter that explains the purpose, goals, stakeholders, and responsibilities associated with an organization’s IG program is one way to add more structure to IG efforts. An IG Charter could be a foundational document or could be developed well after IG efforts are underway after some measure of C-suite “buy in.” In either case, the person(s) tasked with drafting the IG charter will need to have a certain level of vision and understanding of the company’s desired approach to achieving its IG objectives.

Elements of an IG Charter could include the following:

  • Purpose – The purpose of an IG Charter is to provide for the planning and operation of an organization’s IG program. The IG Charter defines the mission, goals, operating principles, organizational structure, and governance model that the organization will use to guide its IG activities.
  • Scope – In the scope section, an organization should generally describe the individuals and groups that will use the IG Charter, as well as the IG program components that will be addressed. These should be high-level descriptions.
  • Terms and Definitions – The terms that the organization selects for the individuals and groups that make up the IG program should be defined, as well as any terms that will be used in the IG Charter that the organization wishes to explain.
  • Mission – The mission of the organization’s IG program should be defined and explained. It should be as simple a statement as possible to guide the organization’s IG efforts. The statement should reflect the organization’s goals regarding its information.
  • Goals – The goals of the organization’s IG program should be defined. The goals described in the IG Charter should be high-level organizational goals as opposed to specific outcomes (e.g., “The IG program will provide consistent and clear expectations to personnel regarding information use and management.”).
  • Principles – An organization should define the principles it will use to guide the planning and execution of its IG program. The defined principles will drive the actions the organization takes to accomplish its defined goals. Principles should be framed in a forward-looking way that recognizes the opportunity for continued growth and maturity as an IG program pursues its goals.
  • IG Program Management Roles, Responsibilities, and Reporting Relationships – An organization should define the individuals and groups that will have specific management roles and responsibilities. Oftentimes, organizations will designate a central, executive committee to be the most senior-level IG authority, and within that group, there will be a head of IG, sometimes referred to as a Chief Information Governance Officer. The responsibilities, duties and membership of the senior-level executive committee should be defined in the charter. Other supporting individuals and groups can be established as desired to focus on specific aspects of an IG program. Each additional committee should have its responsibilities, duties, and membership defined in the Charter. An IG Charter can also define the responsibilities and duties of existing departments and individuals within the organization that will support the IG program.
  • Model for IG Program Implementation – An organization should outline the general steps for the ongoing development, implementation, and maintenance of the IG program in its IG Charter. The senior-level, executive IG committee should determine the steps that are most appropriate for the organization to mature its IG program.
  • Mapping IG Program Entities and Relationships – The IG Charter can include a diagram of the IG program governance structure, if desired.

Memorializing these elements of an IG program will help an organization communicate internally and externally about the purpose and goals of current IG efforts. An IG Charter is also helpful for aligning project goals with organizational goals as it relates to the governance of company information. It may be more feasible to draft the beginning of an IG Charter and add elements over time if the IG efforts at an organization are in the early stages of maturity.

In our experience, the early effort in creating a concrete, well-articulated IG Charter pays off in focusing senior executive or C-suite attention, not only on the overall value-add of the IG function, but also with respect to resources necessary to execute on specific future IG projects.

The material contained in this communication is informational, general in nature and does not constitute legal advice. The material contained in this communication should not be relied upon or used without consulting a lawyer to consider your specific circumstances. This communication was published on the date specified and may not include any changes in the topics, laws, rules or regulations covered. Receipt of this communication does not establish an attorney-client relationship. In some jurisdictions, this communication may be considered attorney advertising.

Receive Email Alerts to New Articles

SUBSCRIBE

February 14, 2018
Written by: Amy Marcos
Category: Data Strategy

Post navigation

Previous Previous post: FTC Nominees Identify Agency’s Top Challenges in Web Questionnaires
Next Next post: China Releases New Personal Information Privacy Standards

Search the Blog

Sign Up for Email Alerts

PODCASTS

Faegre Drinker on Law and Technology

©2023 Faegre Drinker Biddle & Reath LLP. All Rights Reserved. Lawyer Advertising.

  • About Us
  • Additional Resources
  • Contact Us
We use cookies to improve your experience with our website. By browsing our site, you are agreeing to the use of cookies. For more information about how we use cookies, please review our privacy policy and cookie policy. OK
Privacy & Cookies Policy

Privacy Overview

This website uses cookies to improve your experience while you navigate through the website. Out of these, the cookies that are categorized as necessary are stored on your browser as they are essential for the working of basic functionalities of the website. We also use third-party cookies that help us analyze and understand how you use this website. These cookies will be stored in your browser only with your consent. You also have the option to opt-out of these cookies. But opting out of some of these cookies may affect your browsing experience.
Necessary
Always Enabled
Necessary cookies are absolutely essential for the website to function properly. This category only includes cookies that ensures basic functionalities and security features of the website. These cookies do not store any personal information.
Non-necessary
Any cookies that may not be particularly necessary for the website to function and is used specifically to collect user personal data via analytics, ads, other embedded contents are termed as non-necessary cookies. It is mandatory to procure user consent prior to running these cookies on your website.
SAVE & ACCEPT