Information governance: information security and access within a UK context

摘要

Purpose - The purpose of this paper is to demonstrate that records management frameworks need tornbe risk based, flexible and aligned to wider information management objectives. The paper outlinesrnsome of the changes, challenges and opportunities now and on the horizon for records managers. Thernpaper argues that through embedding the international information security standard ISO 27001 inrnconjunction with the records management standard ISO 15489, holistic information governancernstrategies will be delivered that are responsive to change.rnDesign/methodology/approach - The paper provides a discussion on the challenges facingrnrecords and information management professionals and suggests that ISO 27001 provides some of thernsystems' solutions lacking from ISO 15489.rnFindings - The alignment of ISO 27001 to ISO 15489 strengthens the delivery of existing recordsrnmanagement systems and its drivers. This is critical to build strong information governancernprogrammes, which enable risks to be assessed in an ever-changing information management world.rnPractical implications - Successful implementation of records management requires alignmentrnwith wider information standards and strategies to deliver holistic information management andrngovernance.rnOriginality/value - This research will assist in promoting best practice in records management andrninformation governance.