or M Alan Cameron Records Management Consultant JiscinfoNet
Providing Expertise in Planning & Implementing Information Systems Providing Expertise in Planning & Implementing Information Systems Some propositions is a person to person communication channel, but it is not the private possession of the end-user. is the equivalent ‘ ….of sticking a post card on a public notice board……’ An end-user can commit an organisation to a contract or legal risk All s created or received within an organisation are legally discoverable management is a business issue not just an IT problem.
Providing Expertise in Planning & Implementing Information Systems Providing Expertise in Planning & Implementing Information Systems Three horror stories Norwich Union settled out of court for £450k. Employees had exchanged defamatory s about a competitor (believed to be an in-joke). By time writ was issued s had been destroyed. London Law Firm. Litigation still in course. Racial and sexual discrimination as a result of internal s. Potentially no top limit on the potential fine. UBS Warburg incurred US$206k costs retrieving s from IT archive for litigation.
Providing Expertise in Planning & Implementing Information Systems Providing Expertise in Planning & Implementing Information Systems ApplicationsBusiness Requirement SERVERS, Short term storageContinuous availability 24 x 7 Anti-virus, anti-spam, content control, authorization Security Management Archive Retention/disposal, search and retrieval archiving blocking, access rights, retention/disposal Policy Management Use of folders, agreed file conventions, deletion/save, attachments End user training/management
Providing Expertise in Planning & Implementing Information Systems Providing Expertise in Planning & Implementing Information Systems How does an system fit with a Records Management system? Anti-virus & Spam filters Firewall Policies and Policy Management System Searching and Retrieval Records Management Systems ?
Providing Expertise in Planning & Implementing Information Systems Providing Expertise in Planning & Implementing Information Systems The Storage Problem One HE institution with 4,500 staff processes av.45, s a day. (not constant, has peaks and troughs) It allows free student use. ++? archive, which goes back 3 years is already many gigabytes, achieved by back-ups daily, and debateable how much could be retrieved An plus attachment sent to all staff is stored 4,500 times.
Providing Expertise in Planning & Implementing Information Systems Providing Expertise in Planning & Implementing Information Systems Storage; Conflicting Interests? IT ADMINSTRATORS limit size of personal mailboxes to contain data volumes which are growing exponentially END USERS Want to keep more that they are allowed Rarely ‘manage’ their in-box Resent Interference in ‘personal’ business COMPLIANCE OFFICERS Keep everything ‘just in case’
Providing Expertise in Planning & Implementing Information Systems Providing Expertise in Planning & Implementing Information Systems The Search for Solutions The IT Answer Looks to major vendors such as IBM and Microsoft to produce systems answers Automatic indexing and retrieval Cost of storage reducing ‘..therefore a minor issue..’ The Business Answer Making better use of existing capabilities of systems End-user training Use of corporate file spaces,metadata conventions etc.
Providing Expertise in Planning & Implementing Information Systems Providing Expertise in Planning & Implementing Information Systems The Reality The vast majority of Institutions have no strategy for effective management of All Institutions are therefore vulnerable to legal discovery, fraud, and compliance issues particularly FOI and Data Protection. The retention period for an is identical to that of a record containing the same information in any other medium. Few end-users of are aware of their employer’s liability for their use.
Providing Expertise in Planning & Implementing Information Systems Providing Expertise in Planning & Implementing Information Systems studies in FE/HE Only aware of 3 1.University of Central England Case study by the Butler Group 2.Loughborough University Study commissioned by JISC (contains a generic policy document) 3. Secure in UK Further and Higher Education
Providing Expertise in Planning & Implementing Information Systems Providing Expertise in Planning & Implementing Information Systems Towards an Policy in an Institution Summary 1. Management is a corporate responsibility. It is not reasonable to expect the End-User to know what should or should not be deleted/retained 2.It has to operate at 3 distinct levels As part of overall IT strategy because part of the answer lies in technical development A clear policy for all users which is enforced and monitored Training in the better use of the facilities contained within the major systems
Providing Expertise in Planning & Implementing Information Systems Providing Expertise in Planning & Implementing Information Systems Questions? Thank You