Skip to content

Information Governance

What is Information Governance?

The set of multi-disciplinary structures, policies, procedures, processes, and controls implemented to manage information at an enterprise level. Information governance ensures that data is managed as a valuable organisational asset.

Governance

What the standards actually require on information governance

Requirements naming information governance across 5 standards, quoted from the control text.

Write adherence to information governance and security policy into the terms of the employment agreement.

CCM-HRS-08 · Employment Agreement Content →

Employment agreements carry terms that bind the employee to comply with the organisation's adopted rules on security and on information governance.

cloud-security-alliance-cloud-controls-matrix-ccm-v4-1::HRS-08 · Employment Agreement Content →

Decide what data governance means for this organization, how it relates to enterprise governance and to information governance (the second edition treats the two as one function), and the scope of decision-making, oversight and stewardship it will exercise ove...

dama-dmbok2-data-management-body-of-knowledge-2nd-edition::DG.2.1 · DG.2.1 Define data governance for the organization →

The documented information that the FM system and this document call for shall be kept under control so that it can be found and used where and when it is needed and is properly safeguarded against loss of integrity or confidentiality and against misuse.

iso-41001-2018-facility-management-systems::7.5.3 · 7.5.3 Control of documented information →

Issues worth weighing in advance, whose importance and treatment depend on the matter: the scope of electronic discovery; its governance and management; who is responsible for each aspect of the project;

iso-iec-27050-1-2019::6.2 · Basic concepts: the issues to consider in advance →

Questions people ask about information governance

What is Information Governance?
The set of multi-disciplinary structures, policies, procedures, processes, and controls implemented to manage information at an enterprise level. Information governance ensures that data is managed as a valuable organisational asset.
Why is Information Governance important for compliance?
Information Governance is a key concept in Governance. Understanding information governance helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Information Governance?
Information Governance appears in the requirement text of Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1, Cloud Security Alliance Cloud Controls Matrix (CCM) v4.1, DAMA-DMBOK2 - Data Management Body of Knowledge (2nd Edition), ISO 41001:2018 - Facility Management Systems, ISO/IEC 27050-1:2019. Across these standards we have identified 7 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Information Governance?
Explore our compliance framework pages to see how information governance applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Information Governance applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.