Information Compliance: Fundamental Concepts and Best Practices

Compliance is a crucial component of the GRC framework, which encompasses governance, risk, and compliance. It involves aligning an organization's information-related policies and practices with applicable requirements, including legal, regulatory, social, and environmental concerns. This book provides examples of information compliance requirements and is intended for decision-makers who need to understand these requirements.

Format: Hardback
Length: 304 pages
Publication date: 28 April 2023
Publisher: Rowman & Littlefield

Compliance is a crucial component of the widely discussed GRC (governance, risk, and compliance) framework, which encompasses three key elements of organizational strategy: governance and risk. The GRC framework encompasses all aspects of organizational strategy and operations, including the creation, collection, retention, disclosure, ownership, and use of information by companies, government agencies, and non-profit entities.

Information governance is a critical aspect of the GRC framework, as it develops strategies, policies, and initiatives to maximize the value of an organization's information assets. Information risk management is responsible for identifying, analyzing, and controlling threats to those assets. Information compliance, on the other hand, seeks to align an organization's information-related policies and practices with applicable requirements.

While compliance has traditionally been viewed as a legal concern, it is a multi-faceted concept that encompasses legal, social, and environmental considerations. This book aims to provide a comprehensive understanding of information compliance requirements, including those specified in laws, regulations, contracts, standards, industry norms, and an organization's code of conduct and other internal policies. It also considers compliance with social and environmental concerns that are impacted by an organization's information-related policies and practices.

The book is intended for a wide range of decision-makers, including compliance officers, information governance specialists, risk managers, attorneys, records managers, information technology managers, and other individuals who need to understand legal and non-legal compliance requirements. It offers practical insights and examples to help organizations develop and implement effective compliance programs that meet their specific needs and obligations.

In conclusion, compliance is a critical component of the GRC framework, and it requires a comprehensive approach that considers legal, social, and environmental considerations. This book provides a valuable resource for decision-makers who need to understand and implement effective information compliance programs.

Weight: 594g
Dimension: 238 x 161 x 24 (mm)
ISBN-13: 9781538167663