Many people have trouble throwing things away. Retention schedules are great in business but unfortunately most people do not have them in their personal lives. This can be a problem with BYOD as people can easily over retain corporate data on personal devices. Excerpted below is a great article from CITEworld by Matt Rosoff entitled The Huge BYOD Risk You Are Probably Ignoring
When companies worry about BYOD and consumerization, their first line of thought is probably data leaks: a lost phone with customer records, or the employee who accidentally stores secret product plans in a shared folder on a public cloud service.
But there’s another equally pressing concern that many companies ignore. What if you’re served with a request for information as part of a legal proceeding? Do you know what information your employees are creating, and where they’re storing it? Could you retrieve it if required by law? Are they destroying information that’s supposed to be kept, or keeping information that’s supposed to expire after a certain date?
It’s called data governance or information governance, and it’s going to become a big problem over the next few years warns CITE 2013 speaker Deborah Juhnke, the director of information management consulting for the law firm Husch Blackwell.
“We’re certainly making good strides on controlling risk, but so much focus has been on security. We’re not doing such a good job yet on controlling the risk of the data itself — the fact that it’s even out there,” says Juhnke. “I cant find anything in the literature that says anybody’s really focused on the governance aspect of data. Where is it, what is it, how long does it need to be kept, should we be keeping it at all, how do we comply, and how do we get rid of it when we’re supposed to?”
Peter Sloan, a partner at the firm who leads the information governance group, says the problem lies in basic human behavior — because people are using their own devices for work, they’re more likely to treat the data they create as personal, too. “I think of it as my own device, so the organization’s rules may not apply to my behavior. It’s an inherently risky environment.”…
“Senior leadership of organizations must lead by example and give clear direction that information governance is as important to an organization’s well-being as financial governance,” says Juhnke. “Information governance is everyone’s responsibility.”
The article goes on to talk about smart training and policies as the solution. Definitely a great read on the topic. Thank Records Guru for tweeting this article.