Welcome!

News Feed Item

Survey: Gaps in Accountability, Commitment and Practice Threaten Records and Information Management Compliance

While many organizations claim to have strong records and information management (RIM) programs in place, a look behind-the-scenes reveals many lack fundamental building blocks, like measurement and employee engagement and training. Those gaps keep organizations from realizing RIM program cost savings and leave them vulnerable to information exposure and fines from non-compliance with customer, industry or federal regulations and standards. These and other findings are at the heart of a comprehensive benchmark survey published jointly today by Iron Mountain Incorporated (NYSE:IRM), the storage and information management company; Cohasset Associates, a consulting firm specializing in document-based information management; AIIM, a global non-profit organization that provides independent research, education and certification programs to information professionals; and ARMA, a not-for-profit professional association and an authority on information governance.

Information can be a competitive advantage or an Achilles heel of risk and cost. With records continuing to grow in both volume and format, from paper records to electronic records like emails and social media data, the challenges to managing all of it have never been greater. More than 1,300 records and information professionals responded to this joint survey, providing a wide-ranging assessment of the practice of RIM and a benchmark for organizations to measure themselves against.

As evidenced by the data points below, a majority of organizations (87 percent) have a RIM governance program in place but are missing those key pieces that define a measurable, effective program. To help close the gaps, Iron Mountain has identified several opportunities for records managers to improve their programs and advance their organization:

How effective is your RIM program?

  • Only 17 percent of respondents say they have the ability to conduct internal audits and assess regulatory compliance for their programs.
  • Just 8 percent have metrics in place to measure effectiveness and guide program improvement.

Opportunities: Know which customer, industry or regulatory requirements you need to report on. Have a strategy to ensure compliance and monitoring at all levels of the organization. If you store records off-site with a vendor, communicate your standards and that your measurement requirements. And report on those metrics and standards regularly so you’re ready for an external audit by a customer or regulator.

Are employees aware and engaged in your RIM program?

  • Only 7 percent of respondents report that their employees – the largest group of records-makers and keepers – are engaged and supportive of their programs.
  • Just 28 percent of organizations have RIM programs reporting into their compliance and legal departments.

Opportunities: To drive better engagement, set up regular training and other easy-to-access employee touch-points. Engage with partners in human resources or corporate communications to create awareness and leverage low-tech tools like flyers and posters with short but compelling RIM educational content, graphics or tips.

Are you maximizing efficiency in your RIM processes and policies?

  • Only 8 percent of organizations have an automated process for identifying destruction-eligible records, increasing the possibility of loss from inadvertent exposure or theft.
  • Three-quarters (75 percent) say this lack of automation is one of the biggest hurdles to an efficient and defensible retention/destruction program, while 64 percent cite an inability to break the “keep everything” culture of their organization.

Opportunities: Consider using automated tools to either fully classify records or provide user assistance to identify record types and assign them to the right retention schedule. If you store records off-site with a vendor, leverage those tools to calculate destruction eligibility and act on it, making sure to connect retention rules with what is being stored.

“This survey shows that organizations remain committed to making records and information management a priority, but some important gaps still remain,” said Sue Trombley, managing director of thought leadership for Iron Mountain. “Information management, when done right, can push your business ahead and be a strategic lever for success. But until you achieve buy-in at all levels of the organization, master fundamentals like timely destruction, and implement a system to monitor program effectiveness, the sought-after benefits will remain elusive. You will also have to transition away from paper-based processes to manage the complexities of electronic records. Mature, well-run RIM programs have all of these things, plus the ability to adapt as information grows and changes. Organizations that embrace new thinking and adopt proven practices will be able to elevate their records and information programs and realize what we deem an ‘information advantage.’ ”

For further insight from Iron Mountain’s Sue Trombley on the report, read her Information Advantage blog post discussing the survey results. And to see the full survey report, as well as more proven practices, market insights and research on records and information management, visit www.ironmountain.com/thoughtleadership.

About Iron Mountain

Iron Mountain Incorporated (NYSE:IRM) is a leading provider of storage and information management services. The company’s real estate network of over 64 million square feet across more than 1,000 facilities in 36 countries allows it to serve customers with speed and accuracy. And its solutions for records management, data management, document management, and secure shredding help organizations to lower storage costs, comply with regulations, recover from disaster, and better use their information for business advantage. Founded in 1951, Iron Mountain stores and protects billions of information assets, including business documents, backup tapes, electronic files and medical data. Visit www.ironmountain.com for more information.

More Stories By Business Wire

Copyright © 2009 Business Wire. All rights reserved. Republication or redistribution of Business Wire content is expressly prohibited without the prior written consent of Business Wire. Business Wire shall not be liable for any errors or delays in the content, or for any actions taken in reliance thereon.

Latest Stories
Serveless Architectures brings the ability to independently scale, deploy and heal based on workloads and move away from monolithic designs. From the front-end, middle-ware and back-end layers, serverless workloads potentially have a larger security risk surface due to the many moving pieces. This talk will focus on key areas to consider for securing end to end, from dev to prod. We will discuss patterns for end to end TLS, session management, scaling to absorb attacks and mitigation techniques.
We are seeing a major migration of enterprises applications to the cloud. As cloud and business use of real time applications accelerate, legacy networks are no longer able to architecturally support cloud adoption and deliver the performance and security required by highly distributed enterprises. These outdated solutions have become more costly and complicated to implement, install, manage, and maintain.SD-WAN offers unlimited capabilities for accessing the benefits of the cloud and Internet. ...
"We focus on SAP workloads because they are among the most powerful but somewhat challenging workloads out there to take into public cloud," explained Swen Conrad, CEO of Ocean9, Inc., in this SYS-CON.tv interview at 20th Cloud Expo, held June 6-8, 2017, at the Javits Center in New York City, NY.
The deluge of IoT sensor data collected from connected devices and the powerful AI required to make that data actionable are giving rise to a hybrid ecosystem in which cloud, on-prem and edge processes become interweaved. Attendees will learn how emerging composable infrastructure solutions deliver the adaptive architecture needed to manage this new data reality. Machine learning algorithms can better anticipate data storms and automate resources to support surges, including fully scalable GPU-c...
The vast majority of businesses now use cloud services, yet many still struggle with realizing the full potential of their IT investments. In particular, small and medium-sized businesses (SMBs) lack the internal IT staff and expertise to fully move to and manage workloads in public cloud environments. Speaker Todd Schwartz will help session attendees better navigate the complex cloud market and maximize their technical investments. The SkyKick co-founder and co-CEO will share the biggest challe...
Machine learning provides predictive models which a business can apply in countless ways to better understand its customers and operations. Since machine learning was first developed with flat, tabular data in mind, it is still not widely understood: when does it make sense to use graph databases and machine learning in combination? This talk tackles the question from two ends: classifying predictive analytics methods and assessing graph database attributes. It also examines the ongoing lifecycl...
The Founder of NostaLab and a member of the Google Health Advisory Board, John is a unique combination of strategic thinker, marketer and entrepreneur. His career was built on the "science of advertising" combining strategy, creativity and marketing for industry-leading results. Combined with his ability to communicate complicated scientific concepts in a way that consumers and scientists alike can appreciate, John is a sought-after speaker for conferences on the forefront of healthcare science,...
With more than 30 Kubernetes solutions in the marketplace, it's tempting to think Kubernetes and the vendor ecosystem has solved the problem of operationalizing containers at scale or of automatically managing the elasticity of the underlying infrastructure that these solutions need to be truly scalable. Far from it. There are at least six major pain points that companies experience when they try to deploy and run Kubernetes in their complex environments. In this presentation, the speaker will d...
Dhiraj Sehgal works in Delphix's product and solution organization. His focus has been DevOps, DataOps, private cloud and datacenters customers, technologies and products. He has wealth of experience in cloud focused and virtualized technologies ranging from compute, networking to storage. He has spoken at Cloud Expo for last 3 years now in New York and Santa Clara.
Enterprises are striving to become digital businesses for differentiated innovation and customer-centricity. Traditionally, they focused on digitizing processes and paper workflow. To be a disruptor and compete against new players, they need to gain insight into business data and innovate at scale. Cloud and cognitive technologies can help them leverage hidden data in SAP/ERP systems to fuel their businesses to accelerate digital transformation success.
Daniel Jones is CTO of EngineerBetter, helping enterprises deliver value faster. Previously he was an IT consultant, indie video games developer, head of web development in the finance sector, and an award-winning martial artist. Continuous Delivery makes it possible to exploit findings of cognitive psychology and neuroscience to increase the productivity and happiness of our teams.
When building large, cloud-based applications that operate at a high scale, it's important to maintain a high availability and resilience to failures. In order to do that, you must be tolerant of failures, even in light of failures in other areas of your application. "Fly two mistakes high" is an old adage in the radio control airplane hobby. It means, fly high enough so that if you make a mistake, you can continue flying with room to still make mistakes. In his session at 18th Cloud Expo, Le...
Machine learning has taken residence at our cities' cores and now we can finally have "smart cities." Cities are a collection of buildings made to provide the structure and safety necessary for people to function, create and survive. Buildings are a pool of ever-changing performance data from large automated systems such as heating and cooling to the people that live and work within them. Through machine learning, buildings can optimize performance, reduce costs, and improve occupant comfort by ...
DevOps tends to focus on the relationship between Dev and Ops, putting an emphasis on the ops and application infrastructure. But that’s changing with microservices architectures. In her session at DevOps Summit, Lori MacVittie, Evangelist for F5 Networks, will focus on how microservices are changing the underlying architectures needed to scale, secure and deliver applications based on highly distributed (micro) services and why that means an expansion into “the network” for DevOps.
Sanjeev Sharma Joins November 11-13, 2018 @DevOpsSummit at @CloudEXPO New York Faculty. Sanjeev Sharma is an internationally known DevOps and Cloud Transformation thought leader, technology executive, and author. Sanjeev's industry experience includes tenures as CTO, Technical Sales leader, and Cloud Architect leader. As an IBM Distinguished Engineer, Sanjeev is recognized at the highest levels of IBM's core of technical leaders.