Navigating through the Maze of Information Governance Accreditations

Maze of Information Governance Accreditations AGENDA – Why So Many? – Description of Accreditations ICRM – Institute of Certified Records Managers ARMA – International Records and Information Management AIIM – Association for Information and Image Management IAPP – International Association of Privacy Professionals ISACA – Information Systems Audit and Control Association – Survey Says! The results broken out March 9th 2016 Fort Worth ARMA Chapter Information and opinions provided here are strictly mine and not that of my employer or ARMA 2

Maze of Information Governance Accreditations Why So Many? – Convergence of Disciplines RIM IT Security Data Privacy March 9th 2016 Fort Worth ARMA Chapter Information and opinions provided here are strictly mine and not that of my employer or ARMA 3

Maze of Information Governance Accreditations Description of Accreditations – ICRM : CRM (Certified Records Manager) The Institute of Certified Records Managers (ICRM) is an international certifying organization of and for professional records and information managers. The Testing consists of 6 Parts – Management Principles and the Records and Information (RIM) Program – Records and Information: Creation and Use – Records Systems, Storage and Retrieval – Records Appraisal, Retention, Protection and Disposition – Technology – Case Studies (written responses) » More on the CRM More on the CRM 4 March 9th 2016 Fort Worth ARMA Chapter Information and opinions provided here are strictly mine and not that of my employer or ARMA

Maze of Information Governance Accreditations Description of Accreditations – ARMA : IGP (Information Governance Professional) Mission of the Information Governance Professional (IGP) – Provide an information governance credential within an ethical and professional framework to support individuals to deliver organizational value and reduce risk. IGP Governance Board – The IGP program is governed by the IGP Governance Board, which is incorporated separately from ARMA International. » (More about the Board)More about the Board 5 March 9th 2016 Fort Worth ARMA Chapter Information and opinions provided here are strictly mine and not that of my employer or ARMA

Maze of Information Governance Accreditations Description of Accreditations – ARMA : IGP (Information Governance Professional) The Testing consists of 140 multiple-choice questions from the following domains; – Managing Information Risk and Compliance – Developing IG Strategic Plan – Developing IG Framework – Establishing the IG Program – Establishing IG Business Integration and Oversight – Aligning Technology with the IG framework » More on the Exam Blue Print More on the Exam Blue Print 6 March 9th 2016 Fort Worth ARMA Chapter Information and opinions provided here are strictly mine and not that of my employer or ARMA

Maze of Information Governance Accreditations Description of Accreditations – AIIM : CIP (Certified Information Professional) Ensure information is dynamically delivered to staff and customers Improve information sharing and collaboration Improve enterprise search and access to information Continuously analyze information to identify new business opportunities and improvements Ensure appropriate information security and privacy controls Manage information and records Streamline and automate information intensive processes 7 March 9th 2016 Fort Worth ARMA Chapter Information and opinions provided here are strictly mine and not that of my employer or ARMA

Maze of Information Governance Accreditations Description of Accreditations – AIIM : CIP (Certified Information Professional) The Testing consists of Approx. a 2 hour exam from the following domains; – Creating and Capturing Information – Organizing and Categorizing Information – Governing Information – Automating Information‐Intensive Processes – Managing the Information Lifecycle – Implementing an Information Management Solutions » More on the Exam More on the Exam 8 March 9th 2016 Fort Worth ARMA Chapter Information and opinions provided here are strictly mine and not that of my employer or ARMA

Maze of Information Governance Accreditations Description of Accreditations – AIIM : Information Governance Learn how to identify and demonstrate business benefits to different stakeholders – Get an information accountability framework that reduces costs, manages risk, and optimizes value – Get a thorough understanding of necessary components, technologies, and instruments – Identify impact of mobile, social, cloud and big data analytics – Learn how to conduct a risk assessment and mitigation – Learn how to automate records management and disposition – Learn how to safely get rid of redundant, outdated, and trivial information (ROT) 9 March 9th 2016 Fort Worth ARMA Chapter Information and opinions provided here are strictly mine and not that of my employer or ARMA

Maze of Information Governance Accreditations Description of Accreditations – AIIM : Information Governance Training and Exam consist of the following domains: – Demonstrate the Value of an Information Governance Program – Determine the Roles and Responsibilities – Determine the Necessary Information Governance Technologies » ECM / BPM – Gain Support for an Information Governance program – Measure the Performance of an Information Governance Program – Plan a Taxonomy and Metadata Model for Information Governance – Plan an Information Governance Program – Plan for Big Data, Mobile, Cloud and Social Media – Plan IG for Improving Information Lifecycle Quality, Security and Privacy » More Information More Information 10 March 9th 2016 Fort Worth ARMA Chapter Information and opinions provided here are strictly mine and not that of my employer or ARMA

Maze of Information Governance Accreditations Description of Accreditations – AIIM : ERM (Electric Records Management) Electric Records Management Certification provides you with a thorough understanding of how to best automate the way electronic records are identified, captured and classified. – ERM Practitioner Course – ERM Specialist Course – ERM Master Course 11 March 9th 2016 Fort Worth ARMA Chapter Information and opinions provided here are strictly mine and not that of my employer or ARMA

Maze of Information Governance Accreditations Description of Accreditations – AIIM : ERM (Electric Records Management) Course and exam content contains the following: – The ERM Practitioner course covers concepts and technologies associated with managing electronic records – The ERM Specialist course covers planning and implementing a comprehensive records management program and environment – The ERM Master program provides a thorough understanding of ERM concepts and processes with the main elements from the above and includes a practical case study exercise. » More on ERM More on ERM 12 March 9th 2016 Fort Worth ARMA Chapter Information and opinions provided here are strictly mine and not that of my employer or ARMA

Maze of Information Governance Accreditations Description of Accreditations – AIIM : BPM (Business Process Management) Learn how to map, design, and automate operational processes using a combination of strategies, change management, and technologies. – BPMp (Practitioner Course) – ECMp (Specialist Course) – ECMm (Master Course) 13 March 9th 2016 Fort Worth ARMA Chapter Information and opinions provided here are strictly mine and not that of my employer or ARMA

Maze of Information Governance Accreditations Description of Accreditations – AIIM : BPM (Business Process Management) Course and exam content contains the following: – The BPMp - Practitioner course covers concepts and technologies associated with improving business processes. – The BPMs - Specialist course covers requirements gathering and analysis, application integration, monitoring and process analysis – The BPMm - Master program provides a thorough understanding of BPM concepts and processes with the main elements from the Practitioner and Specialist courses and includes a practical case study exercise. » More on BPM More on BPM 14 March 9th 2016 Fort Worth ARMA Chapter Information and opinions provided here are strictly mine and not that of my employer or ARMA

Maze of Information Governance Accreditations Description of Accreditations – IAPP : CIPM (Certified Information Privacy Manager ) CIPM, shows that you don’t just know privacy regulations—you know how to make it work for your organization. In other words, you’re the go-to person for day-to-day operations when it comes to privacy. Training – Module 1: Fundamentals of Information Privacy » Unit 1 : Common Principles and Approaches to Privacy » Unit 2 : Jurisdictions and Industries » Unit 3 : Information Security » Unit 4 : Online Privacy – Module 2: Privacy Management » Unit 1 : Privacy Program Governance » Unit 2 : Privacy Operational Life Cycle 15 March 9th 2016 Fort Worth ARMA Chapter Information and opinions provided here are strictly mine and not that of my employer or ARMA

Maze of Information Governance Accreditations Description of Accreditations – IAPP : CIPM (Certified Information Privacy Manager ) Certification (Exam) Consists of 2 Parts based on the following domains; – Privacy Program Governance » Organization Level » Develop the Privacy Program Framework » Implement the Privacy Policy Framework » Metrics – Privacy Operational Lifecycle » Assess Your Organization » Protect » Sustain » Respond » More on Training / More on Certification More on Training More on Certification 16 March 9th 2016 Fort Worth ARMA Chapter Information and opinions provided here are strictly mine and not that of my employer or ARMA

Maze of Information Governance Accreditations Description of Accreditations – IAPP : CIPP (Certified Information Privacy Professional ) The CIPP credential says you know privacy laws and regulations and how to apply them. It also says you know how to secure your place in the information economy. – U.S. Government (CIPP/G) – U.S. private-sector (CIPP/US) – Europe (CIPP/E) 17 March 9th 2016 Fort Worth ARMA Chapter Information and opinions provided here are strictly mine and not that of my employer or ARMA

Maze of Information Governance Accreditations Description of Accreditations – IAPP : CIPP (Certified Information Privacy Professional ) Training and Certification (Exam) – All follow a similar content layout, differentiated by discipline The following are the categories covered; – Introduction to privacy laws – Application of Law and limits on Collection and Use of Data – Compliance – Audit » More about the different CIPP certifications More about the different CIPP certifications 18 March 9th 2016 Fort Worth ARMA Chapter Information and opinions provided here are strictly mine and not that of my employer or ARMA

Maze of Information Governance Accreditations Description of Accreditations – IAPP : CIPT (Certified Information Privacy Technologist ) The CIPT credential is the first and only certification of its kind worldwide. It was launched by the IAPP in 2014 to meet the growing need that only tech pros can fill (Privacy by Design) Training Content; – Critical privacy concepts and practices that impact IT – Consumer privacy expectations and responsibility – How to bake privacy into early stages of IT products and services for cost control, accuracy and speed-to-market – How to establish privacy practices for data collection and transfer – How to preempt privacy issues in the Internet of Things (IoT) – How to factor privacy into data classification and emerging tech such as cloud computing, facial recognition and surveillance – How to communicate privacy issues with partners such as management, development, marketing and legal. 19 March 9th 2016 Fort Worth ARMA Chapter Information and opinions provided here are strictly mine and not that of my employer or ARMA

Maze of Information Governance Accreditations Description of Accreditations – IAPP : CIPT (Certified Information Privacy Technologist ) Certification (Exam) – Understanding the need for privacy in the IT environment – Core Privacy Concepts – Privacy Considerations in the Information Life Cycle – Privacy in Systems and Applications – Privacy Techniques – Online Privacy Issues – Technologies with Privacy Considerations » More about CIPT More about CIPT 20 March 9th 2016 Fort Worth ARMA Chapter Information and opinions provided here are strictly mine and not that of my employer or ARMA

Maze of Information Governance Accreditations Description of Accreditations – ISACA : CISM (Certified Information Security Manager) The management-focused CISM certification promotes international security practices and recognizes the individual who manages, designs, and oversees and assesses an enterprise’s information security Certification Requirements – Five (5) or more years of experience in information security management. Waivers are available for a maximum of two (2) years. Test consists of 200 questions from four domains – Information Security Governance – Information Risk Management and Compliance – Information Security Program Development and Management – Information Security Incident Management » More on CISM More on CISM 21 March 9th 2016 Fort Worth ARMA Chapter Information and opinions provided here are strictly mine and not that of my employer or ARMA

Maze of Information Governance Accreditations Description of Accreditations – ISACA : CISA (Certified Information Security Auditor) The CISA designation is a globally recognized certification for IS audit, control, and security professionals. Certification Requirements – Five (5) or more years of experience in IS audit, control, assurance, or security. Waivers are available for a maximum of three (3) years. Test consists of 150 questions from five domains – The Process of Auditing Information Systems – Governance and Management of IT – Information Systems Acquisition, Development and Implementation – Information Systems Operations, Maintenance and Service Management – Protection of Information Assets » More on CISMA More on CISMA 22 March 9th 2016 Fort Worth ARMA Chapter Information and opinions provided here are strictly mine and not that of my employer or ARMA

Maze of Information Governance Accreditations Description of Accreditations – ISACA : CRISC (Certified in Risk and Information Systems)Control CRISC certification is designed for those experienced in the management of IT risk, and the design, implementation, monitoring and maintenance of IS controls. Certification Requirements – Three (3) or more years of cumulative work experience performing the tasks of a CRISC professional across at least two (2) CRISC domains, of which one must be in Domain 1 or 2, is required for certification. Test consists of 150 questions from four domains – IT Risk Identification – IT Risk Assessment – Risk Response and Mitigation – Risk and Control Monitoring and Reporting » More on CRISC More on CRISC 23 March 9th 2016 Fort Worth ARMA Chapter Information and opinions provided here are strictly mine and not that of my employer or ARMA

Maze of Information Governance Accreditations Survey Says! – Survey consisted of a total of 14 accreditations – Asked to rate 1-14 (1 being high) – Demographics One of the following disciplines – Organizational – Looking to advance in the RIM discipline – Organizational – Hiring Manager – Consultant – Recruiter » Organizational – Looking to advance = one category » Combined Consultant / Organizational – Hiring Manager into one category ARMA Chapter Region or State 24 March 9th 2016 Fort Worth ARMA Chapter Information and opinions provided here are strictly mine and not that of my employer or ARMA

Maze of Information Governance Accreditations Survey Says! – Sent Survey to; Colleagues – Consultants – Industry Professionals All ARMA Chapter Presidents – Received 25 surveys back 19 Organizational 6 Hiring Manager / Consultant – Results broken out by Organizational Manager / Consultant 25 March 9th 2016 Fort Worth ARMA Chapter Information and opinions provided here are strictly mine and not that of my employer or ARMA

Maze of Information Governance Accreditations Survey Says! – Organizational Results - # 1 picks CRM – 53% selecting it as # 1 accreditation – 76% selected it as one of the top 4 ARMA IGP – 32% selecting it as # 1 accreditation – 79% selected it as one of the top 4 AIIM CIP, ERM(p) & ERM(m) – 5% selecting it as # 1 accreditation – selected it as one of the top 4 » CIP = 53% » ERM(p) = 11% » ERM(m) = 21% 26 March 9th 2016 Fort Worth ARMA Chapter Information and opinions provided here are strictly mine and not that of my employer or ARMA

Maze of Information Governance Accreditations Survey Says! – Organizational Peers State the top 4 accreditations are; 1.CRM = 53% 2.ARMA-IGP = 32% 3.AIIM-CIP= 21% 4.IAPP-CIPM = 16% 27 March 9th 2016 Fort Worth ARMA Chapter Information and opinions provided here are strictly mine and not that of my employer or ARMA

Maze of Information Governance Accreditations Survey Says! – Hiring Manager / Consultant - # 1 picks CRM – 83% selected it as the # 1 accreditation – 83 % selected it as one of the top 4 ARMA IGP – 17% selected it as the # 1 accreditation – 83% selected it as one of the top 4 » The only two accreditations to be picked as #1 28 March 9th 2016 Fort Worth ARMA Chapter Information and opinions provided here are strictly mine and not that of my employer or ARMA

Maze of Information Governance Accreditations Survey Says! – Hiring Manager / Consultant top 4 accreditations are; 1.CRM = 83% 2.Two-way tie= 33% – IAPP – CIPM – IAPP-CIPP/US 3.ARMA-IGP = 33% 4.AIIM -ERM/P = 17% 29 March 9th 2016 Fort Worth ARMA Chapter Information and opinions provided here are strictly mine and not that of my employer or ARMA

Maze of Information Governance Accreditations Survey Says! --- Comparison 30 #Organizational%#Hiring Manager / Consultant% 1CRM53%1CRM83% 2ARMA-IGP32%2Two-way tie33% 3AIIM-CIP21%IAPP – CIPM 4IAPP-CIPM 16%IAPP-CIPP/US 3ARMA-IGP33% 4AIIM -ERM/P17% March 9th 2016 Fort Worth ARMA Chapter Information and opinions provided here are strictly mine and not that of my employer or ARMA

Maze of Information Governance Accreditations Survey Says! --- Demographics Comparison 31 RegionAccreditation # 1# 2 SoutheastCRMIGP Great LakesCRMIGP/CIPM SouthwestCRMCIP PacificCRM / IGPIGP / CIPM CanadaCRMIGP EuropeCRMIGP March 9th 2016 Fort Worth ARMA Chapter Information and opinions provided here are strictly mine and not that of my employer or ARMA

Maze of Information Governance Accreditations 32 #Hiring Mgr. / Consultant - Overall% 1CRM83% 2IAPP-CIPM || IAPP-CIPP/US33% 3ARMA - IGP33% 4AIIM -ERM/P17% 5AIIM - CIP17% 6AIIM -ERM/M33% 7ISACA-CRISC17% 8AIIM -BPM/S17% 9ISACA-CISM17% 10AIIM -BPM/P17% 11AIIM -ERM/S17% 12AIIM -Info Governance33% 13IAPP-CIPP/EU || IAPP-CIPP/G17% 14IAPP-CIPP/T17% #Organizational - Overall% 1CRM53% 2ARMA-IGP32% 3AIIM-CIP21% 4IAPP-CIPM16% 5AIIM -ERM/S11% 6AIIM -BPM/P16% 7ISACA-CISM21% 8IAPP-CIPP/US16% 9ISACA-CRISC11% 10IAPP-CIPP/G16% 11IAPP-CIPP/T16% 12AIIM -Info Governance11% 13ISACA-CISA11% 14IAPP-CIPP/EU21% March 9th 2016 Fort Worth ARMA Chapter Information and opinions provided here are strictly mine and not that of my employer or ARMA

Maze of Information Governance Accreditations GDPR and IGP – GDPR (The General Data Protection Regulation) More focus on social networks and cloud providers – Processor accountability Requires comprehensive changes of business practices for companies that did not implement a comparable level of privacy until now (especially non-European companies handling EU personal data) – Life Cycle of data » Access » Retention » Destruction – Global ramifications 33 March 9th 2016 Fort Worth ARMA Chapter Information and opinions provided here are strictly mine and not that of my employer or ARMA

Maze of Information Governance Accreditations 34 March 9th 2016 Fort Worth ARMA Chapter Information and opinions provided here are strictly mine and not that of my employer or ARMA Thank You!