What do clients think about law firm IG? January 13, 2014

Speakers Teresa Britton, Exelon Stephan Eberle, Silicon Valley Bank Tom Morrissey, Purdue Pharma Gillian Glass, Farella Braun + Martel LLP gglass@fbm.com The views and opinions expressed by the panel members are based on their expertise of the subject matter and do not constitute official positions or reflect specific business practices of their company or firm.

Information Governance Definitions Information governance is the activities and technologies that organizations employ to maximize the value of their information while minimizing associated risks and costs.  Source: Information Governance Initiative Information governance, or IG, is the set of multi-disciplinary structures, policies, procedures, processes and controls implemented to manage information at an enterprise level, supporting an organization's immediate and future regulatory, legal, risk, environmental and operational requirements. Source: Gartner We believe that IG contains multiple facets that must be part of the conversation, including, at a minimum: Information security Data science Electronic discovery Business management Compliance Business intelligence Analytics Records management Finance Audit Privacy Risk Management IT and Infrastructure Management Source: Information Governance Initiative

Security

ISO 27001 The ISO 27000 family of standards helps organizations keep information assets secure. Using this family of standards will help your organization manage the security of assets such as financial information, intellectual property, employee details or information entrusted to you by third parties. ISO/IEC 27001 is the best-known standard in the family providing requirements for an information security management system (ISMS). http://www.iso.org/iso/home/standards/management-standards/iso27001.htm

Storage

Privacy

Outside Counsel Guidelines

Retention / Disposition