Annual Check Up for Your Records and Information Management Program

2
1548
By Patty P. Tehrani
ptprep66@yahoo.com
LinkedIn | www.policypatty.com

With so many cases involving cybersecurity and data governance issues most organizations may deem it necessary to check their information governance programs and end up neglecting their records management controls. My view is that it may also be a good time to check your records management program. This article sets out some key considerations to help you conduct this check.

What is Records Management?

First, let’s make sure you know what records management is. This should not be confused with information governance, which happens often.  Information governance entails a more strategic approach and can be viewed as the wide-ranging framework that includes standards, processes, roles and responsibilities and reporting measures to ensure accountability for and alignment of the management of information with your organization’s goals.  Records management is more operational in nature and can be viewed as controls that address the lifecycle of records – that is – the planning, managing, organizing, and promoting of how an organization’s records are created, maintained, used, and disposed of.

Why is a Records Management Program needed?

Next, you need to consider what needs to be done with your records? Every organization has some sort of legal obligation to manage its records since records evidence its actions (e.g., business of the organization, decisions and actions taken, and organizational activities). Records are also valuable resources and integral to any organization’s operations. As a result, a systematic approach is needed to manage them.

What are the benefits of a Records Management Program?

You know what records management is and why it is needed, now you may be wondering what the benefits of a program are to your organization? If a records management program is properly implemented and maintained, it can result in significant business benefits while mitigating risks to your organization. At a minimum, a well-defined and maintained program enables an organization to:

  • reduce costs and improve the efficiency of recordkeeping by knowing what records it has and what it needs;
  • where to access records and how long to keep them and eventually get rid of them;
  • how to protect them; and
  • what to do in the event of a business issue (disaster, litigation, investigation, etc.).

These benefits are further illustrated below.

records-management

What are the core components of a Records Management Program?

With what you know above, how should you set out to define your records management program? Your organization may already have a formal records management program in place with an administrator or governance group that ensures your program is in place and maintained.  Whether this is the case or not consider the following overview of key components to help you check your current program or help you create one.

records-retention-1

records-retention-2

records-retention-3

Please note that the foregoing overview is a summary and not intended to be inclusive of every consideration for your records management program.  Your program and its viability is largely contingent on the legal and regulatory requirements applicable to your business, as well as the nature of your business and your operations.

Summary

To recap, an effective and well maintained Records Management Program is a critical to your organization as summarized below.

R Reduce costs by allowing inactive records to be stored off-site and eventually disposed of
E Enable effective performance of your organization’s functions and activities
C Comply with legal and regulatory recordkeeping requirements
O Operate more efficiently and will even improve productivity by making the information needed for decision making and operations readily available
R Restrict use to protect against inappropriate and unauthorized access and provide protection and support in litigation
D Deliver services without interruption in the event of a disaster
S Support consistent execution and delivery of services and products

[clickToTweet tweet=”Annual Check Up for Your Records and Information Management Program @SCCE” quote=”Annual Check Up for Your Records and Information Management Program” theme=”style3″]

2 COMMENTS

  1. Excellent blog!! So good to differentiate between records management (enterprise-wide) and information governance! Records management is often taken for granted but there are so many opportunities to become more efficient and compliant, and to minimize risk through appropriate disposition! This is a must read!! Ann Meehan, RHIA, Director, Information Governance AHIMA

Comments are closed.