The information management and governance challenge in modern business

The importance of information management and governance has skyrocketed at many organizations in recent years. Both sensitive consumer information and businesses' intellectual property have become a popular target for nefarious purposes -- and, of course, there are the endless regulatory requirements to worry about.

In this video interview, Randy Moeller, Procter & Gamble's manager of global records management governance, discusses his biggest challenges in information management and governance. The constant changes in global regulations should keep those in charge of information management on their toes -- especially when it comes to privacy, he says.

"The privacy [regulations] are the ones that are really growing and really changing," Moeller said. "And, as they spread globally, they are taking more of the European model of being fairly restrictive on how you can handle and pass that information along."

Maintaining consumer confidence through proper records management and governance is vital to modern organizations, Moeller adds, especially because of the increased scrutiny surrounding how corporations behave and are perceived in the public eye.

"We go through strides in order to make sure that we keep that confidence of the consumer [in] what we're doing with your information and with our employee information in practice," Moeller said. "It gives them the confidence level to be more [trusting] of corporations like us."

Let us know what you think about the story; email Ben Cole, Associate Editor. For IT compliance news and updates throughout the week, follow us on Twitter @ITCompliance.

View All Videos

Join the conversation


Send me notifications when other members comment.

Please create a username to comment.

Mr. Moeller's point about the challenge of "finding out what we don't know" is very relevant. Even in my organization, which is far smaller than Procter & Gamble, this is an issue because the executives in charge of the governance are so far disconnected from the staff level employees doing the work. Then in many companies it seems like poor communication exacerbates the issue.
Yes I hear that quite a bit - how important it is that everyone in the organization be involved with info governance processes because governance is so vital to good business for modern companies. Communication and cooperation is essential too, to make sure nothing falls through the cracks information-wise to create security and compliance problems down the road.
I don't know that everyone needs to be involved in the governance aspect of IT but they certainly need to be on the same page when it comes to security policies, expectations, and enforcement. There's so much lip service given to security and governance in this context: "Yes, we have a policy for that (therefore we're secure)". Yet that's rarely the case...or it's at least not the way things work.

I suspect that if you were to look at many (most?) breaches, you'd find that someone, somewhere along the security/governance food chain said - or assumed - that everything was okay because that was the intention. Intentions do no equal results...