This week, an industry group was launched to highlight another area where businesses need to tread warily: e-disclosure.
According to the group, businesses need to do more than simply ensure private data remains private. They also need to keep that data in a way that allows them to find information, if a court or regulator requires it.
E-disclosure is potentially a massive problem for businesses involved in legal probes, as a court – or the other side’s lawyers – can ask for any information that is held in electronic form. Court, and regulators such as the Financial Services Authority, take a dim view on companies that cannot produce their files in a timely manner.
The problem, according to Simon Price, European director of enterprise search company Recommind and one of the people steering the project, is that too many businesses lack an overall approach to information risk.
As well as e-disclosure, the group is looking at compliance, cloud computing, insider fraud, information barriers and confidentiality management, although the focus is less on conventional, perimeter security and more focused on how businesses organise their information internally, and whether that information is a potential risk to the organisation.