Explore Contoural's programs to develop policies and best practices in IT, Data Management, and Cross-functional Policy Assessment & Implementation. Contoural is the largest independent provider of strategic Information Governance consulting services, including Records and Information Management, Litigation Readiness and Control of Privacy and Sensitive Information.

The California Consumer Privacy Act (CCPA) will go into effect on January 1, 2020, providing a relatively short window for companies to prepare. While final details of the CCPA need to be sorted out by the CA Legislature, enough is known to start preparing now. Join Tom Mighell, Esq. and Greg Forest as they present a CCPA Action Plan: what specific steps you need to take to get ready. 

Topics include: 
• Key steps in getting ready for CCPA, including policies, processes, technology and training 
• If you are already GDPR compliant, what you can and can’t leverage to comply with CCPA 
• What areas can be addressed today, even though the rules may change 
• What areas you should wait for until the law is finalized 

Join us for a lively discussion!

Creating a California Consumer Privacy Act Action Plan

It's May 25th and the GDPR implementation date is here. Now that you have your GDPR Data Protection Policy in place and you've found all of your GDPR Data out in the wild, what's next? Before you can organize, you need to first answer some basic questions: Where is the right place for specific content to live? How and where do we keep as few copies as possible? Who can and should have access to what? These are all elements of a data placement strategy. At its simplest level a data placement strategy ensures a place for everything and everything in its place. Join Tom Mighell and Greg Forest from Contoural as they discuss unstructured data placement strategies and provide an overview of the components of a strategy including: 

• Determining which data should go in which repositories; including file shares, SharePoint, and enterprise content management systems 
• Organizing data to be intuitive for users, and still meet policy goals 
• Maintaining the fewest copies of information, while still providing collaboration and access for your end users 
• Incorporating records retention, data security and other compliance requirements into your repositories

Becoming Compliant: Taming Your GDPR Data

Many of you are no doubt preparing for compliance with the European General Data Protection Regulation (GDPR) requirements, which have a fast-approaching enforcement date of May 25. A significant component of the regulation will require companies to retain personal data on European residents no longer than is necessary to satisfy the purposes for which it was processed. If your organization does collect and process any personal data, have you justified its retention through your records retention schedule or privacy policies? Companies need an up-to-date records retention policy and schedule to support both deletion and retention of critical information.  Join Tom Mighell, Esq., as he discusses the top 5 reasons an outdated retention schedule can undermine your GDPR compliance. 

Topics include: 
• Moving away from a “save everything forever” mindset to a “saving smart” approach
• Strategies for handling retention requirements of personal data, when you may need to keep the record longer
• Building consensus with business users on the importance of deleting personal data when required
• Behavior change management approaches for getting employees to comply

Top 5 Reasons an Outdated Retention Schedule Will Undermine Your GDPR Compliance

In order to properly control privacy data under GDPR, you need a plan for both classifying and understanding where that info is kept. Regulation-specific standards are often insufficient, and trying to apply multiple standards is difficult and confusing to employees. In this webcast. Greg Forest from Contoural will discuss how to create a single comprehensive yet workable data security classification standard that both ensures compliance and is intuitive and easier for employees to follow. Topics include: 
• An overview of key data classification frameworks including HIPAA, ISO, FIPS and others, their strengths and their weaknesses 
• Key attributes that should go into your standard including privacy, confidentiality, IP and other types of sensitive information 
• How to create a hybrid standard 
• Sampling your standard with content, and using this to drive adjustments and fine tuning 
• How to integrate data classification with record retention

Creating a Single Data Security Classification Policy for GDPR & Everything Else

In many ways, creating your GDPR Data Protection Policy is the easy part. As the May deadline approaches,  the real work begins on finding all your Privacy Data not only in databases but also GDPR content scattered across file shares, desktops and other storage repositories around the world.  

In this Webcast, Contoural experts Greg Forest and Tom Mighell will discuss:
• Real-world strategies and processes for identifying, classifying and securing large amounts of not only unstructured GDPR data
• Addressing semi-structured content
• Applying automation
• Creating an ongoing process

Becoming Compliant – Finding GDPR Data in the Wild

In many ways, having your Data Protection Policy in place is not necessarily the last mile, but the first. In order to be fully GDPR-compliant, you need to understand where all of your information is, where your privacy data lives and how it’s being secured. 

Join Tom Mighell, VP of Delivery Services at Contoural as he discusses the roadmap you need to follow to achieve full compliance before the May 25th deadline. 

Topics will include: 
• Strategies to execute your policy
• How to train everyone in your organization to be aware of privacy requirements 
• Appointing a Data Protection Officer to manage your privacy program for your organization 
• Steps your organization needs to take now to be ready

You've Got Your GDPR Policy, Now What?

A well-designed Information Governance roadmap with appropriate milestones and metrics can drive a successful program forward. Join this webcast to learn more about: 
• Key elements for launching an Information Governance Program 
• How to incorporate these elements to meet your organization’s specific needs
• Creating a team to help you launch your program

Creating an Information Governance Roadmap

Like most companies, you probably have a process for responding to discovery requests in litigation or regulatory matters. But is that process documented? If the staff in charge of discovery left today, or if that big class action finally hit, would you be prepared? Sometimes, having a consistent, repeatable process in place can help to protect you from surprise, sanction, or high discovery costs - especially if your company has a low litigation profile. 

This webcast will cover: 
• How to create a discovery response plan, no matter your company size
• Understanding how good information governance practices can improve your litigation readiness
• Best practices for legal holds
• The role technology plays in eDiscovery, whether you should invest in it, or use outsourced technology services
• eDiscovery when your company stores records in the cloud

Creating an In-House Discovery Response Plan

We don’t usually think of records retention schedules as exciting, but they happen to be one of the most important pieces of your e-discovery and information governance foundations.  Many organizations consider records retention as something that they have to do, but feel handcuffed because they have no way of enforcing a policy.  

Join this webcast to learn more about:  
• Creating a modern, compliant and useful records retention schedule
• Applying a schedule to reduce risks and costs in future discovery
• Addressing both legal and regulatory requirements as well as business needs

Is It Time for Your Retention Schedule to Grow Up and Become Something Useful?

Business units want a policy that allows them to save everything. Legal wants the minimum saved. IT just wants something easy to execute. What should we do? A committee is formed, with legal, IT, records management, HR, and others. The committee meets. Discussions ensue: Which are business records? How long should we save them? Do we allow exceptions? 

The committee meets again. And again. We’re stuck. 

Join Ed Rawson , Michelle Hanrahan, Shawn Cheadle and Mark Diamond as they discuss strategies for building consensus across your organization and making sure your initiative doesn't get stuck! 

About the speakers: 
Ed Rawson is a strategic, results-oriented thought leader who has dedicated over 30 years of his career to helping organizations manage their paper and digital content lowering cost and increasing productivity.  Ed has helped organizations to align information with business value and operational direction to maximize the return on investments, lowering risk and maintaining compliance.

Michele Hanranhan is Records Manager at Sound Transit since January 2015 and is leading a RIM group to implement ECM solution organization wide. She previously worked at Federal Home Loan Bank of Seattle, PATH, and Washington State Department of Transportation and has over 16 years of experience in Records and Information (RIM) with a variety of business, government and non-profit organizations. 

Shawn Cheadle is General Counsel to the Military Space line of business at Lockheed Martin Space Systems. He supports government and international contracts negotiations, drafting and dispute resolution. He also supports information governance, eDiscovery, records management, counterfeit parts investigations, and other functional organizations at Lockheed Martin. He is an ACC Global Board Member, current Information Governance Committee Chair and former Law Department Management Chair, and former Board member and President of ACC Colorado.

Building Consensus Between Legal, Records and IT on What to Save and Not Save

Sometimes there is a mandate to delete large quantities of emails and files very quickly, either after litigation or simply because senior management gets fed up with too much electronic junk. When needing to delete a lot quickly, traditional “manage and let expire over time” approaches don’t work. On the other hand, blanket, delete-everything approaches can run afoul of record retention and legal requirements. What’s an organization to do?


About the Speaker: 
Dan Elam is one of the nation’s best known consultants for information governance.  As an early industry pioneer, he created the first needs analysis methodology and early cost justification models.  Dan’s involvement has been in the design and procurement of some of the largest systems in the world.  Today Dan helps Contoural clients develop business cases and establish strategic road maps for information governance.  He is the former US Technical Expert to ISO and an AIIM Fellow.

How To Delete a Lot of Emails and Files Quickly and Defensibly

Taking a “save everything forever” approach and employee hoarding of e-mails, files and other types of electronic documents are burying organizations under mountains of data, exposing them to privacy risks, increasing costs and risks of eDiscovery, as well as sapping productivity from employees who spend hours every week looking for information. Yet many company’s efforts at aggressively deleting electronic documents are either ineffective or worse, they have the unintended effect of driving “underground archiving” whereby employees save information in insecure locations.  

Join us as we explore smart approaches to preventing employees from hoarding documents.

About the Speaker: 
Kathryn Hilton, Vice President of Consulting for Contoural, has more than 20 years experience in records and information management, strategy consulting, and data storage technology. As a Contoural consultant and practice manager, Kathryn has developed methodologies for Records and Information Management organization design and for Change Management strategy, process, and content.  In addition to leading Contoural teams in these areas, Kathryn assists clients with the globalization of their programs, and has visited client sites around the world for a detailed understanding of business and legal information management requirements. 

Preventing Employees From Hoarding Documents

Information Governance (IG) programs are full of both promise and pitfalls. Many organizations are asking what they can and should do to incorporate IG programs that help their employees be more productive while also reducing risk and costs.  Join expert practitioners Jo Goldstein (Whirlpool), Patricia Oliveira (MUFG Americas), and Mark Diamond (Contoural) as they discuss:

-How they got their organization to care about Information Governance
-Lessons learned while executing their Information Governance programs 
-Why it's important to obtain consensus from across different groups 
-Building the right-sized program for your organization

Join us for a lively discussion!

About the Speakers: 

Jo Kathryn Goldstein, CRM is currently Senior Manager, Information Governance for Whirlpool.  Her career in Information Management has included the pharmaceutical and banking industry.  In the past Jo has served as Vice-Chair for PRIMO- the Pharmaceutical Records and Information Management Organization, President of the Indianapolis ARMA Chapter, and the former ARMA Standards Development Committee.  

Patricia Oliveira leads the Records & Information Management program for MUFG Americas, part of a global financial institution. As such, her focus is to support and develop an enterprise-wide, compliance based RIM program focused on risk mitigation. She has over two decades of experience in planning, designing, and executing complex integrated programs, building strategic organizations, and leading change in multiple disciplines and diverse industries. 

Mark Diamond is founder & CEO of Contoural. He is an industry thought leader in proactive records & information management, litigation readiness and risk & compliance strategies. As a trusted adviser he and his company help bridge legal, compliance, security and business needs and policies with effective processes, technology and change management.

Lessons from the Trenches: In-House Practitioners Talk Information Governance

Multiple copies of unstructured data live everywhere -- on desktops, laptops, file shares, removable media, cloud shares, SharePoint, etc. But before you can organize, you need to first answer some basic questions: 
- Where is the right place for specific content to live? 
- How and where do we keep as few copies as possible? Who can and should have access to what? 
- How do we make it easy to apply both retention and data security, while still enabling classification. 

Join us for a discussion on real-word data placement strategies for dealing with a complex world.

About the Speaker: 
Greg Forest has 30 years of experience in compliance, storage, application software, management, support, and implementation of technical solutions for information governance, data management and regulatory compliance.  As Contoural’s CTO, he has developed methodologies to make information governance solution deployment predictable and cost effective, and has worked with Contoural clients to help them select, configure, test, implement, and train new solutions to reduce cost and risk while improving employee productivity.

Using a Data Placement Strategy to Simplify Data and Document Retention

Records retention and data classification policies should not be created in a vacuum and should not only provide legal statements. Rather, when created effectively, they can be used to guide and drive efforts that work well with both your employees and your technology. 

Join Contoural CEO Mark Diamond as he discusses: 
- Essential attributes of a records retention policy and schedule 
- Strategies that yield higher compliance 
- Strategies to Increase clarity and comprehensive Media Quality and Maturity 
- Steps your organization can take to make sure technology and people work together and against each other.

About the Speaker: 
As founder and CEO of Contoural, Mark Diamond is one of the industry thought leaders in proactive records & information management, litigation readiness and risk & compliance strategies. As a trusted advisor he and his company help bridge legal, compliance, security and business needs and policies with effective processes, technology and change management. Mark is a frequent industry speaker, presenting at numerous Legal and IT industry conferences as well as online venues. Additionally, Mark addresses more than one hundred internal corporate audiences each year.

Creating Record Retention & Data Classification Policies that Work

While you may not be able to avoid litigation, there is a tremendous amount you can do now to prepare for if and when litigation does strike. Join us for a thoughtful presentation on litigation readiness covering the policies, processes and technologies organizations can employ to reduce risk and costs of discovery.  A little effort now can save a lot of pain and expense later.

About the speaker:
Tom is Vice President of Delivery Services at Contoural. With over 25 years of experience in compliance, litigation, privacy and information governance, Tom regularly works with corporations to develop information governance programs, including the creation and validation of records retention schedules.  Tom served as Chair of ABA TECHSHOW 2008, and as 2011-2012 Chair of the ABA's Law Practice Division.

Become Litigation Ready: What To Do Now Before Your Next Lawsuit

Legal is about to start an information governance initiative. IT gets wind of it and says that this initiative would be redundant, as they have been working on a data governance project for the past six months. The data governance charter touches on some areas of information governance, but then again not really.  Should there be two initiatives, or increase the scope of one of them? Join us for a lively discussion on the difference between Information Governance and Data Governance.

About the speaker: 
Greg Forest has 30 years of experience in compliance, storage, application software, management, support, and implementation of technical solutions for information governance, data management and regulatory compliance.  As Contoural’s CTO, he has developed methodologies to make information governance solution deployment predictable and cost effective, and has worked with Contoural clients to help them select, configure, test, implement, and train new solutions to reduce cost and risk while improving employee productivity.

The Difference Between Information Governance and Data Governance

Often the biggest challenge of launching an Information Governance (IG) program is securing funding. Information Governance professionals understand the value IG programs bring to an organization, but the challenge is effectively communicating that value to senior management. How can you move your program's funding from "should do"
to "will do"? 

Join Contoural CEO Mark Diamond as he discusses:

-How your IG funding proposal can rise above the noise of other funding requests 
-Strategies for determining how much to ask for and when 
-How to develop an IG Return On Investment with ROI metrics 
-Funding case studies of how other in-house practitioners have garnered funding 
-How to get senior management to recognize the need for Information Governance


About the Speaker: 
Mark Diamond is founder and CEO of Contoural and one of the industry thought leaders in proactive records & information management, litigation readiness and risk & compliance strategies. As a trusted advisor he and his company help bridge legal, compliance, security and business needs and policies with effective processes, technology and change management. Mark is a frequent industry speaker, presenting at numerous Legal and IT industry conferences as well as online venues. Additionally, Mark addresses more than one hundred internal corporate audiences each year.

How to Ask for Information Governance Funding

Information

Governance;

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

How to Ask for Information Governance Funding

Presented by

About this talk

More from this channel