Records Retention schedules are essential to a democratic society, as they let people know what records a government agency is keeping. Listed records should be clear, descriptive, and include digital and indexes where appropriate.

Sensitive information protection refers to the processes that protect this information. For example, if you collect SSNs, driver’s license numbers, or biometrics, then this information is considered personal. However, some types of information can be non-specific, such as bank account numbers, but can still identify a person. This is why organizations should put in place procedures...

One of the important steps in information governance program development is developing metrics. These metrics can be used to monitor the effectiveness of the program. However, metrics should be unique to an enterprise, and should not be based on the goals and metrics of similar enterprises.