Information Compliance: Fundamental Concepts and Best Practices

Compliance is a crucial component of the GRC framework, which encompasses governance, risk, and compliance. It involves aligning an organization's information-related policies and practices with applicable requirements, including legal, regulatory, and social and environmental concerns. This book provides examples of information compliance requirements and is intended for decision-makers who need to understand these requirements.

Format: Paperback / softback
Length: 304 pages
Publication date: 28 April 2023
Publisher: Rowman & Littlefield

Compliance is a crucial component of the widely discussed GRC (governance, risk, and compliance) framework, which encompasses three essential elements of organizational strategy: governance and risk. The GRC framework encompasses all aspects of organizational strategy and operations, including the creation, collection, retention, disclosure, ownership, and use of information by companies, government agencies, and non-profit entities.

Information governance is a critical aspect of the GRC framework, as it develops strategies, policies, and initiatives to maximize the value of an organization's information assets. Information risk management is responsible for identifying, analyzing, and controlling threats to those assets. Information compliance, on the other hand, seeks to align an organization's information-related policies and practices with applicable requirements.

While compliance has traditionally been viewed as a legal concern, it is a multi-faceted concept that encompasses various aspects. Adherence to legal and regulatory requirements is widely acknowledged as a critical component of compliance initiatives, but it is not the only one. Taking a broader approach, this book identifies, categorizes, and provides examples of information compliance requirements that are specified in laws, regulations, contracts, standards, industry norms, and an organization's code of conduct and other internal policies.

The book also considers compliance with social and environmental concerns that are impacted by an organization's information-related policies and practices. The book is intended for compliance officers, information governance specialists, risk managers, attorneys, records managers, information technology managers, and other decision-makers who need to understand legal and non-legal compliance.

In conclusion, compliance is a critical component of the GRC framework, and it requires a comprehensive approach that considers legal, regulatory, social, and environmental factors. This book provides valuable insights into information compliance requirements and helps decision-makers ensure that their organizations are compliant with applicable laws, regulations, and standards.

Weight: 404g
Dimension: 223 x 155 x 18 (mm)
ISBN-13: 9781538167670