The Principles: How we incorporated them into our Business Process by Lawrie Barroner.

Slides:



Advertisements
Similar presentations
Module N° 3 – ICAO SARPs related to safety management
Advertisements

The Impact of Auditing on Records Management Risk and Compliance Susan B. Whitmire, CRM, FAI Manager, Enterprise Records and Information Management BlueCross.
Radiopharmaceutical Production
Introduction to Records Management Policy
USG INFORMATION SECURITY PROGRAM AUDIT: ACHIEVING SUCCESSFUL AUDIT OUTCOMES Cara King Senior IT Auditor, OIAC.
Auditing, Assurance and Governance in Local Government
What is GARP®? GARP® is an Acronym for Generally Accepted Recordkeeping Principles ARMA understands that records must be.
1 Auditing in the Public Interest Records Management in the Victorian Public Sector Audit objective Audit had two objectives : The first objective was.
Records and Information Management: An Overview. What are Records? Records - Any recorded information regardless of physical form/characteristics or storage.
Records Management for UW-Madison Employees – An Introduction UW-Madison Records Management UW-Archives & Records Management 2012 Photo courtesy of University.
QA Programs for Local Health Departments
Chapter 7: Key Process Areas for Level 2: Repeatable - Arvind Kabir Yateesh.
QUALITY ASSURANCE AND IMPROVEMENT PROGRAM (QAIP)
Institut de la statistique du Québec (ISQ) surveys: compendium of good practices and quality self-assessment checklist European Conference on Quality in.
How a Large Company Used the Principles to Establish its Corporate Information Governance Robin Woolen, MBA, IGP President / Principal.
Briefing for NOAA Managers
Coping with Electronic Records Setting Standards for Private Sector E-records Retention.
Developing a Records & Information Retention & Disposition Program:
Purpose of the Standards
Author(s): David A. Wallace and Margaret Hedstrom, 2009 License: Unless otherwise noted, this material is made available under the terms of the Creative.
Achieving our mission Presented to Line Staff. INTERNAL CONTROLS What are they?
Records Management Basic Training
RECORDS MANAGEMENT City of Oregon City “ That was then… this is now!”
Department of Commerce Records Management Training.
Created May 2, Division of Public Health Managing Records What is a Record? What is a Records Retention & Disposition Schedule? Why is this Important?
OH&S Management System
Internal Auditing and Outsourcing
Why Information Governance….instead of Records & Information Management? Angela Fares, RHIA, CRM, CISA, CGEIT, CRISC, CISM or
Session No. 3 ICAO Safety Management Standards ICAO SMS Framework
Compliance Presented by: Marty McNulty, ARMA Board Member.
IN FOCUS LEGAL AND OTHER REQUIREMENTS RECYCLER QUALIFICATION OFFICE MARCH 2014.
G17: Recordkeeping for Business Activities Carried out by Contractors Patrick Power, Manager Government Recordkeeping Programme Archives New Zealand.
Security Policies Jim Stracka The Problem Today.
Records Managers’ Forum 28 February Draft standard on the appraisal and disposal of State records Catherine Robinson Senior Project Officer, Government.
IAEA International Atomic Energy Agency Reviewing Management System and the Interface with Nuclear Security (IRRS Modules 4 and 12) BASIC IRRS TRAINING.
Principle of Protection By C’Les Jensema About ARMA International and the Generally Accepted Recordkeeping Principles® ARMA International (
Generally Accepted Recordkeeping Principles Generally Accepted Recordkeeping Principles ® Registered Trademark of ARMA International.
RECORDS MANAGEMENT Office of Compliance. OBJECTIVES Four main objectives of a Records Management Program: –Increase efficiency of record keeping. –Protection.
Ecords Management Records Management Paul Smallcombe Records & Information Compliance Manager.
Records & Information Management (RIM) Risk: Is Your Company Exposed? March 19, 2013.
1.Summary of Needs Analysis 2.Summary of Action Plan 3.Systems Analysis between Microsoft SharePoint® and OpenText Content Server 4.System Recommendation.
Avoid Disputes, Not Complaints Presented by: Stuart Ayres and Derek Pullen Stuart Ayres, Scheme Manager Derek Pullen, Scheme Adjudicator.
The UKs Number One! “Treating Customers Fairly” Stuart Johnson Head of Distribution.
The right item, right place, right time. DLA Privacy Act Code of Fair Information Principles.
Priscilla Emery President, ECM Scope.  What is Compliance?  What is GARP?  What is considered Best Practice in this area?  A Framework for Compliance.
Indiana Regional Sewer District Association October 26, 2015.
Information Security IBK3IBV01 College 2 Paul J. Cornelisse.
Generally Accepted Recordkeeping Principles Generally Accepted Recordkeeping Principles ® Registered Trademark of ARMA International.
Audit of predetermined objectives PFMA Reputation promise/mission The Auditor-General of South Africa has a constitutional mandate and, as the.
Generally Accepted Recordkeeping Principles: The Principle of Transparency Alaska Chapter of ARMA International Presented by: Tara Carey, ARMA Board Member.
Office of Human Research Protection Georgia Health Sciences University.
1 City of Shelby Wastewater Treatment Division Becomes State’s Second Public Agency to Implement a Certified Environmental Management System CERTIFICATION.
Module N° 6 – SMS regulation
RECORDS MANAGEMENT TRAINING City of Oregon City. INTRODUCTION TO RECORDS MANAGEMENT
Maximizing the Value of Information Information Governance As A Strategic Framework Presenter: Margaret Hermesmeyer, MLIS, IGP, CRM Division Chief Information.
Internal Audit Section. Authorized in Section , Florida Statutes Section , Florida Statutes (F.S.), authorizes the Inspector General to review.
Presenters: Margaret Hermesmeyer, MLIS, CRMKevin Waldrup, MBA, CRM Chief, Records Management Division Records Management Administrator Office of the Attorney.
Governance, risk and ethics. 2 Section A: Governance and responsibility Section B: Internal control and review Section C: Identifying and assessing risk.
Slide 1 Standard Operating Procedures. Slide 2 Goal To review the standard operating procedures Creating the informed consent document Obtaining informed.
RECORDS MANAGEMENT TRAINING City of Oregon City. INTRODUCTION TO RECORDS MANAGEMENT.
General Data Protection Regulation (EU 2016/679)
OH&S Management System
General Data Protection Regulation
OH&S Management System
Our approach to tax Introduction
6 Principles of the GDPR and SQL Provision
Corporate Governance for Mutuals
RECORDS AND INFORMATION
Information Governance Part 2
Radiopharmaceutical Production
Presentation transcript:

The Principles: How we incorporated them into our Business Process by Lawrie Barroner.

Courtesy of

Introduction Old Business Process Our Issue Long written reports were often overlooked Lacked quick reference grading scale

Our Goal Needed to be S.M.A.R.T. S pecific M easurable A ttainable R elevant T imely

Our Search was on…

The Principles

The Principles Defined A mid-level manager manages the recordkeeping program for the division and delegates program responsibility to appropriate individuals. The division adopts policies and procedures to guide personnel and ensure the program can be audited.

The Principles Defined The processes and activities within the divisions recordkeeping program are documented in a manner that is open and available to all personnel within the division. Orders, directives, business processes and workflow are outlined and available to all. Records Management personnel are selling the program through training and promotion. Principle of Transparency

The Principles Defined A recordkeeping program shall be constructed so the records and information generated or managed by the division have reasonable and suitable guarantee of authenticity and reliability.

The Principles Defined A recordkeeping program shall be constructed to ensure a reasonable level of protection to records and information that are private, confidential, privileged, secret or essential to business continuity.

The Principles Defined The recordkeeping program shall be constructed to comply with applicable laws and other binding authorities, as well as the divisions policies which include holding organizations and individuals accountable for not complying.

The Principles Defined A division shall maintain records in a manner that ensures timely, efficient and accurate retrieval of needed information.

The Principles Defined A division shall maintain its records and information for an appropriate time, taking into account legal, regulatory, fiscal, operational and historical requirements.

The Principles Defined A division shall provide secure and appropriate disposition for records that are no longer required to be maintained IAW their disposition schedule. Principle of Disposition

Survey Discussion

Our team decided to focus on The Principle of Compliance… We believed the other 7 Principles would follow if the Principle of Compliance was established first. The Principle of Compliance is: The recordkeeping program shall be constructed to comply with applicable laws and other binding authorities, as well as the divisions policies which include holding organizations and individuals accountable for not complying.

Please note…that we already had a developed Retention Schedule and General Governance outlining Records Management expectations. Our issue was getting buy-in from the divisions and getting them to take Records Management seriously. So we created our Maturity Levels for Compliance to determine how to score the different divisions

Level There is no clear definition of the records that the organization is obligated to keep. Records and other business documentation are not systematically managed according to records management principles. Various branches of the section define this to the best of their ability based on their interpretation of their Records Management Program rules and regulations. There is no central oversight and no apparent or well-defined accountability for compliance. Qualifications

LevelQualifications The rules and regulations that govern its mission and introduced some compliance policies and record keeping practices around those policies, have been identified. This includes compliance policies regarding Electronic Information Systems (EIS), PII and TRIM process throughout the division. Additionally, the division has initiated a System of Records Notice (SORN) for their EIS systems.

Level Qualifications All relevant compliance laws and regulations have been identified. Record creation and capture are systematically carried out in accordance with Records Mgmt. Policies. A strong code of mission conduct which is integrated into its overall information mgmt. structure and recordkeeping policies have been developed. Compliance and the records that demonstrate it are highly valued and measurable. Specific goals related to compliance have been identified.

LevelQualifications Processes to capture & protect records have been implemented. Records are linked with metadata to demonstrate and measure compliance. Training & internal SAVs are conducted regularly. Records of SAVs & training are available for review. Lack of compliance is remedied through implementation of defined corrective actions. ID’d & submitted request to schedule their EIS’s. Processes for PII and use of TRIM throughout have been established. SORN’s have been completed for their EIS systems.

The Principles – Compliance Principle and Maturity Level Definitions The importance of compliance and the role of records & information in it are clearly recognized at the senior leadership levels Continuous improvement processes are well established & monitored by senior leadership. The roles & processes for information management and discovery are integrated. The division’s stated goals related to compliance have been met. The division suffers few or no adverse consequences based on SOPs and compliance failures. Level Qualifications

Once we all agreed the Compliance Principles were defined to meet our objectives… We then focused on and adapted our 8 Criterions as a means to move through the Records Management Process…This along with the Principle of Compliance provided the standard to develop a measurable scale

8 Criterions 1. Records Management Training 2. Conduct a Inventory of their Records 3. Develop a File Plan based on the Inventory 4. File Records based on the File Plan 5. Move Records to the Approved Electronic Records Management Application (TRIM) 6. Classified Files Handling 7. File Classified and Unclassified 8. End of Life Cycle Actions

Criterion 1 RM Training Criterion 2 Identify Records Criterion 3 Develop File Plan Criterion 4 Build File Folders Criterion 5 ERM (TRIM) Criterion 6 Classified Files Handling Criterion 7 File Classified & Unclass Criterion 8 End of Year Actions Sub-Standard 0 – 1.99 In Development 2 – 2.99 Average 3 – 3.99 Proactive 4 – 4.99 Meets Standard 5 Divide the total by 8 (33/8= 4.125) The overall grade on this example would be Blue/Proactive Add up the total score from the eight criterions (33) Initial Scoring Method

5 Colors was too many and our Leadership wanted a true 3 Color ‘Stop Light’ chart Sub-StandardIn DevelopmentAverageProactiveMeets Standard

So we adjusted the Maturity Level model to meet our needs…we moved the Orange to Yellow and the Blue to Green… Sub-StandardAverageMeets Standard And a true ‘Stop Light’ Scale was born. Red is bad…Yellow is in between…Green is good!

Complete (12.5% Value) In Progress (6.3% Value) Initial Phase (No Value) Percent Complete Records Mgmt Training Records Inventory File Plans Drafted / Submitted for Approval Physical and Electronic File Folders Built TRIM Queues Built and Final Records into TRIM Classified Files Handling File Classified & Unclassified End of Year Actions Overall46.42% Office A50.2% Office B62.7% Office C37.6% Office D43.9% Office E37.7% 0 – 33 %33.1 – 66%66.1 – 100% 46.42% OVERALL New Scoring Method

Remember to keep you goals S.M.A.R.T. S pecific M easurable A ttainable R elevant T imely

Questions?