This content is part of the Essential Guide: Enterprise records management strategy guide for GRC professionals

Video: Building information governance strategy from the ground up

Records management and information governance is a complicated task at any organization -- especially when you are basically starting from scratch. As companies increasingly move to digitize paper records, many questions have yet to be answered: What needs to be protected? What information takes priority? What paper records can stay that way?

One person who knows about these information governance strategy challenges is Stephanie McCutcheon, the first-ever manager of records and information management at Denver, Colo.-based SM Energy. McCutcheon was a presenter at the ARMA International Conference and Expo in Chicago last month, where she talked about her experiences deploying an enterprise records and content management system at a previous employer.

In this video interview conducted at the ARMA Conference, McCutcheon sat down with editor Ben Cole to discuss the latest trends and obstacles facing records managers -- a job, she said, that's becoming much more difficult in the face of an increasing number of mobility tools in the workforce.

With employees bringing their own iPhones, iPads, tablets and other mobile devices for work use, it creates a challenge for records managers to separate the personal information from the business data, and govern it accordingly, she said.

More on information governance strategy

Information management challenges for the modern business

Metadata's role in information governance strategy

"They want to be able to use one device, and have it do everything for them -- for work purposes and personal purposes," McCutcheon said. "How do we keep that separate? How do we manage that? How do we govern that?"

Another big challenge comes from the potential for human error: Companies can have the best tools to protect from outside threats such as hackers, but employees still make mistakes. As a result, a huge part of information governance strategy is training and educating employees on data protection best practices, McCutcheon said.

"Employees sometimes do things that they don't mean to do -- there's that inadvertent disclosure," McCutcheon said. "I don't know that there's technology out there that can prevent people from doing silly things."

In this video interview, learn more about McCutcheon's information governance strategy tactics, her thoughts on alleviating records management risk and what tools are -- and are not -- available to help with these processes.

Let us know what you think about the story; email Ben Cole, associate editor. For IT compliance news and updates throughout the week, follow us on Twitter @ITCompliance.

View All Videos

Start the conversation

Send me notifications when other members comment.

Please create a username to comment.