information risk report

The Information Risk LandscapeChristian ToonHead of Information Risk

© 2010 Iron Mountain Incorporated. All rights reserved. Iron Mountain and the design of the mountain are registered trademarks of Iron Mountain Incorporated. All other trademarks and registered trademarks are the property of their respective owners.

ENVIRONMENTThe Information Risk Landscape

Complex and fast-changing

The opportunities: business without boundaries

The obstacles: the everyday terror of terabytes

The Information Risk Landscape

BIG DATA

“Every day, we create 2.5 quintillion bytes of data — so much that 90% of the data in the world today has been created in the last two years alone.”(Understanding Big Data, IBM Whitepaper, 2012)


VOLUME: CREATION

Every hour, enough information is consumed by Internet traffic to fill 7 million DVDs.


SIDE BY SIDE THEY'D SCALE MOUNT EVEREST 95 TIMES

VOLUME:CONSUMPTION

70% of the UK will have 4G coverageby the end of 2013


SPEED


£83The average price of an entry level smartphone has fallen to

ACCESSIBILITY


1in4 is now a ‘three screener’

MULTI-DEVICE

corporate email accounts worldwide


>918 MILLION

content pieces shared on facebook/month

>30 BILLION

tweets/day

>400 MILLION

Even defining the basic rules of the road around “document” and “record” is not always simple...


MORE COMPLEX REGULATIONS

SO, WHAT DOES THIS MEAN FOR INFORMATION MANAGERS?


PwC Information Risk Index 2013 Average score of 40.6 out of 100

BUSINESSES ARE AT RISK

53%of European businesses expect to lose data


PROCESSES ARE PAPER AND DIGITAL



DATA SWAMPYou need to better manage stored information

And with a tight budget


RECORDS MANAGEMENTIs key to meeting legal retention periods


PEOPLEYour best asset and your greatest risk

THE WORLD HAS CHANGED BUT HAVE WE?WHAT SHOULD WE FOCUS ON?



ACTION POINT 1:Lead your organisation out of danger

The Board

Information Management

Risk & Reputation


Get senior buy-in

You need to speak the language of the board room


A change in behaviour and culture required

Corporate culture


ACTION POINT 2:Get a handle on the data swamp

Implement a compliant records management programme



Create a retention policy and build into your RM programme


Operate a policy of controlled trust

ACTION POINT 3:


Make friends with other business functions

CORPORATE INFORMATION RESPONSIBILITY



WHAT IS THE INFORMATION RISK MATURITY INDEX?

Strategy

People

Communications

Security

WHAT WAS THE AVERAGE SCORE ACROSS EUROPE?


WHAT WAS THE AVERAGE SCORE ACROSS EUROPE?


40.6


WHAT IS THE RESEARCH TELLING US?


No one is managing their information at a satisfactory level.


48% have experienced impacts to reputation


The Netherlands is lagging behind


Legal is bottom of the pack


THE BIGGEST RISK IS BEHAVIOUR AND CULTURE 1% consider information risk everyone’s responsibility


• Patent protection• Inadvertent disclosure• Financial liability

HIGH RISKS & SERIOUS CONSEQUENCES


• They treat information risk as a boardroom issue.• They have a multi-

disciplinary team in charge of information risk.• They have a balanced

information strategy and they monitor its effectiveness.

WHAT ARE THE BEST ORGANISATIONS DOING?

information risk report

Business

information risk landscapewhat

information risk landscapeside

information risk landscapeno

information risk landscape48

chargeof information

information risk landscape40

pwc information risk

ofthe data