+ All Categories
Home > Business > From ISO to Implementation A framework for ECM Implementation

From ISO to Implementation A framework for ECM Implementation

Date post: 30-Oct-2014
Category:
Upload: gbroadbent67
View: 13 times
Download: 3 times
Share this document with a friend
Description:
ARMA 2008 Conference - From ISO to ECM Implementation
Popular Tags:
54
From ISO to Implementation A framework for ECM Implementation George Broadbent Director Enterprise Solutions, Entium Technology Partners Education Code: TR1-1315
Transcript
Page 1: From ISO to Implementation  A framework for ECM Implementation

From ISO to Implementation A framework for ECM

Implementation

George BroadbentDirector Enterprise Solutions, Entium Technology Partners

Education Code: TR1-1315

Page 2: From ISO to Implementation  A framework for ECM Implementation

Learning Objectives

Upon completion of this session, participants will be able to:– Identify the ISO standards that have a direct and

measurable impact on their ECM program implementation

– Map their overall ECM system implementation and develop an implementation plan for their organization

Page 3: From ISO to Implementation  A framework for ECM Implementation

Learning Objectives

Upon completion of this session, participants will be able to:– Discuss with corporate management how their RM

program interconnects with ECM and substantiate their analysis

– Analyze their existing environment and determine where additional information needs to be gathered or where processes need to be improved for their RM/ECM projects

Page 4: From ISO to Implementation  A framework for ECM Implementation

Session Outline

• Definitions – ISO and ECM

• ISO Standards – Who is ISO?

• ECM Implementation

• ISO Standards that Affect Implementation

Page 5: From ISO to Implementation  A framework for ECM Implementation

Enterprise Content Management

• ECM Includes: – Electronic Content Management – Electronic Records Management– Imaging– Business Process Management– Web Content Management

• Used for Managing Unstructured Data

Page 6: From ISO to Implementation  A framework for ECM Implementation

Enterprise Content Management

Graphics, Video, & Audio

Reports

Photos and Blueprints

Web Content

Documents and Records

Enterprise Applications

eMails

Faxes

Forms

Desktop Applications

Page 7: From ISO to Implementation  A framework for ECM Implementation

Overview of ISO

• ISO - International Organization for Standardization: – Is an international standard-setting body

composed of representatives from various national standards organizations.

– Founded on 23 February 1947, the organization promulgates world-wide industrial and commercial standards.

(source Wikipedia)(source Wikipedia)

Page 8: From ISO to Implementation  A framework for ECM Implementation

Overview of ISO

• Governing body that provides the ability for institutions and individuals to contribute their expertise to a particular topic.

• Standards are developed as ISO XXXXX

(source Wikipedia)(source Wikipedia)

The organization adopted “ISO” based on the Greek word “ἴσος” (isos), which means “equal.”

Page 9: From ISO to Implementation  A framework for ECM Implementation

ISO Standards Used

• ISO 23081 – Information and Documentation -- Records

management processes -- Metadata for records

• ISO 15489 – The Standard for Records Management

• ISO 15836– The Dublin Core metadata element set that deals

with cross-domain information resource description

• ISO 19005-1– For long-term preservation of electronic documents

Page 10: From ISO to Implementation  A framework for ECM Implementation

ISO Standards Used, Cont’d.

• ISO 14721– The OAIS (Open Archival Information System)

standard, which presents models describing digital preservation features and functions

• ISO/TR 18492:2005 – Provides practical methodological guidance for the

long-term preservation and retrieval of authentic electronic document-based information

Page 11: From ISO to Implementation  A framework for ECM Implementation

ISO Standards Used, Cont’d.

• IEC 82045– Technical standard for Document management,

industry-specific versions

• ISO 9001– ISO 9000 requires that records be kept of critical

operations. Record keeping is the fourth tier of required documentation in ISO 9000, following the Quality Policy Manual, Procedures, and Work Instructions

Page 12: From ISO to Implementation  A framework for ECM Implementation

Benefits of Using a Framework

• Establishes policies and operational procedures

• Furnishes program documentation• Prepares for business continuity• Defines roles and responsibilities• Demonstrates compliance

Page 13: From ISO to Implementation  A framework for ECM Implementation

Framework Components

Page 14: From ISO to Implementation  A framework for ECM Implementation

Putting it Together

Enterprise Classification

Corporate Standards Polices and Procedures

Regulatory

Research

Classification PlanRetention Schedules

Records Management

Program

Strategic Records Improvement

Program

Information Security Program

Holistic Framework for Information Security

Software Requirements

Software Selection

Document Type Classification

Taxonomy and Metadata Hierarchy

Technical Architecture

ECM Program and Software Installation

Business Process Management

Page 15: From ISO to Implementation  A framework for ECM Implementation

Records Management Program

Records Management Program

Strategic Records Improvement Program

Page 16: From ISO to Implementation  A framework for ECM Implementation

Records Management Program

Enterprise ClassificationCorporate Standards Polices and

Procedures

Regulatory Research

Classification Plan

Retention Schedules

Page 17: From ISO to Implementation  A framework for ECM Implementation

Records Management Program

• Establishment of a Records Management Program:– Critical if you know that you are or

will be doing records management in the near future

– Records Management will shape your implementation

– Needs tremendous consideration before implementation

Enterprise Classificati

on

Corporate Standards

Polices and Procedures

Regulatory Research

Classification Plan

Retention

Schedules

Records Management Program

Strategic Records

Improvement Program

Information Security Program

Holistic Framework for

Information Security

Software Requirements

Softwar

e Selectio

n

Document Type

Classification

Taxonomy and Metadata Hierarchy

Technical Architectur

e

ECM Program

and Software

Installation

Business Process

Management

Page 18: From ISO to Implementation  A framework for ECM Implementation

Strategic Records Program

• The program consists of:– People– Policies – Standards and Practices– Technology Infrastructure

• The program oversees records management at all levels within the organization

Enterprise Classificati

on

Corporate Standards

Polices and Procedures

Regulatory Research

Classification Plan

Retention

Schedules

Records Management Program

Strategic Records

Improvement Program

Information Security Program

Holistic Framework for

Information Security

Software Requirements

Softwar

e Selectio

n

Document Type

Classification

Taxonomy and Metadata Hierarchy

Technical Architectur

e

ECM Program

and Software

Installation

Business Process

Management

Page 19: From ISO to Implementation  A framework for ECM Implementation

Corporate Policies and Procedures

• Corporate Policies standardize an approach to solving complex issues across the enterprise

• Includes:– E-mail Policy– Instant Messaging Policy– Code of Business Conduct– Corporate Privacy Principles– Information Security Policies

Enterprise Classificati

on

Corporate Standards

Polices and Procedures

Regulatory Research

Classification Plan

Retention

Schedules

Records Management Program

Strategic Records

Improvement Program

Information Security Program

Holistic Framework for

Information Security

Software Requirements

Softwar

e Selectio

n

Document Type

Classification

Taxonomy and Metadata Hierarchy

Technical Architectur

e

ECM Program

and Software

Installation

Business Process

Management

Page 20: From ISO to Implementation  A framework for ECM Implementation

Classification Plan

• An Analysis of Corporate documents (Paper or Electronic)

• Organized by Themes

• Two to Three Levels Deep

Enterprise Classificati

on

Corporate Standards

Polices and Procedures

Regulatory Research

Classification Plan

Retention

Schedules

Records Management Program

Strategic Records

Improvement Program

Information Security Program

Holistic Framework for

Information Security

Software Requirements

Softwar

e Selectio

n

Document Type

Classification

Taxonomy and Metadata Hierarchy

Technical Architectur

e

ECM Program

and Software

Installation

Business Process

Management

Page 21: From ISO to Implementation  A framework for ECM Implementation

Retention Schedule

• Builds on the Classification Plan

• Meta Data Assigned:– Relevant Regulations– Retention Period (e.g., 3 yrs)

Enterprise Classificati

on

Corporate Standards

Polices and Procedures

Regulatory Research

Classification Plan

Retention

Schedules

Records Management Program

Strategic Records

Improvement Program

Information Security Program

Holistic Framework for

Information Security

Software Requirements

Softwar

e Selectio

n

Document Type

Classification

Taxonomy and Metadata Hierarchy

Technical Architectur

e

ECM Program

and Software

Installation

Business Process

Management

Page 22: From ISO to Implementation  A framework for ECM Implementation

Regulatory Research

• United States Code (USC)

• Code of Federal Regulations (CFR)

• State Statutes

• State Administrative Codes

• Title Organization and Nomenclature

• Federal Register and Case Law

• International and Global Considerations

Regulatory Research

Page 23: From ISO to Implementation  A framework for ECM Implementation

ISO 15489 – Regulatory Research

• The regulatory environment consists of:– Statute and case laws, and regulations– sector-specific– specific to records, archives, access,

privacy, evidence, electronic commerce, data protection and information

– Mandatory standards of practice– Voluntary codes of best practice

Regulatory Research

Page 24: From ISO to Implementation  A framework for ECM Implementation

Bring RM and RR Together

• Match up the research with the record series

• Top 10 citations by length of retention period

• Determination of retention periods:– Official Retention Period vs. Working Copy

• Authorization & Endorsement (Sign-off):– Legal Counsel, Tax– Audit, IT

Page 25: From ISO to Implementation  A framework for ECM Implementation

ISO 15489 – Records Management

• This part of ISO 15489:– Covers the management of records, in

all formats or media, created or received

Source: ISO 15489

ISO 15489

• Provides guidance on – determining the responsibilities of organizations for

records and records policies, procedures, systems and processes

– records management in support of a quality process framework to comply with ISO 9001 and ISO 14001

– the design and implementation of a records system• Does not include the management of archival records

within archival institutions

Page 26: From ISO to Implementation  A framework for ECM Implementation

ISO 15489 – Records Management

• Implementation strategies for compliant records systems may include:– Designing and Documenting records systems– Training records practitioners and other personnel– Converting records to new records systems,

formats and controls– Setting standards and measuring compliance and

performance against them– Determining retention periods and making

decisions about records which have continuing value, in keeping with the regulatory environment

ISO 15489

Page 27: From ISO to Implementation  A framework for ECM Implementation

ISO 23081 Meta Data For Records

• How meta data is used in the context of ISO 15489

• Records Management Meta Data is used to:– Identify– Authenticate– Contextualize records– And the people, processes and systems

that• Create, Manage, Maintain and use them

and the policies that govern them

ISO 23081

Page 28: From ISO to Implementation  A framework for ECM Implementation

ISO 23081 Meta Data For Records

• Key Sections of the Standards:

– Section 5 - Purposes of Records Management Metadata

• Assessment of meta data to be collected

– Section 6 - Roles and Responsibilities• Identify who has specific responsibility for

collection of meta data information

ISO 23081

Page 29: From ISO to Implementation  A framework for ECM Implementation

ISO 23081 Meta Data For Records

– Section 7 - Records Management Metadata in Relation to Other Metadata Areas• Defines the types of meta data to be

collected• E-business • Preservation• Resource description and discovery• Rights management

– Section 8 - Management of Metadata• Where and when should meta data be

captured and applied

ISO 23081

Page 30: From ISO to Implementation  A framework for ECM Implementation

ISO 23081 Meta Data For Records

• Section 9 - Meta Data Components – Metadata about the record itself– Metadata about the business rules or

policies and mandates– Metadata about agents– Metadata about business activities or

processes– Metadata about records management

processes– Metadata about the metadata record

ISO 23081

Page 31: From ISO to Implementation  A framework for ECM Implementation

ISO 15836 – Dublin Core

• Meta Data Standards

• Cross Domain Information Resource Descriptions

• Consists of 15 Elements (tags)

ISO 15836

LanguageLanguageRelationRelationCoverageCoverageRightsRights

TypeTypeFormatFormatIdentifierIdentifierSourceSource

DescriptionDescriptionPublisherPublisherContributorContributorDateDate

TitleTitleCreatorCreatorSubjectSubject

Page 32: From ISO to Implementation  A framework for ECM Implementation

Security Program

Information Security Program

Holistic Framework for Information Security

Page 33: From ISO to Implementation  A framework for ECM Implementation

Information Security Program

• Establishes the policies for how information is accessed

• Used in the taxonomy and classification plans to determine who can see what

• Governs the accessibility of information

• Should be a dialog – not a one way conversation

Enterprise Classificati

on

Corporate Standards

Polices and Procedures

Regulatory Research

Classification Plan

Retention

Schedules

Records Management Program

Strategic Records

Improvement Program

Information Security Program

Holistic Framework for

Information Security

Software Requirements

Softwar

e Selectio

n

Document Type

Classification

Taxonomy and Metadata Hierarchy

Technical Architectur

e

ECM Program

and Software

Installation

Business Process

Management

Page 34: From ISO to Implementation  A framework for ECM Implementation

ISO 17799 – Information Security

• Conduct Risk Assessments• Establish a Security Policy• Compile an Asset Inventory• Define Accountability• Address Physical Security• Document Operating Procedures• Determine Access Controls• Coordinate Business Continuity• Demonstrate Compliance

ISO 17799

Page 35: From ISO to Implementation  A framework for ECM Implementation

ISO 18492:2005 Long-Term Preservation

• Ensures the long term preservation of electronic documents

• Archival and Retrieval Strategy

ISO 18492:2005

Page 36: From ISO to Implementation  A framework for ECM Implementation

ISO 18492:2005 Long-Term Preservation

• Key Sections: – Section 5 - Long-Term Preservation

• Objectives of your long term archival strategy

– Section 6 - Elements of a Long-Term Preservation Strategy

• Addresses Media renewal, Metadata and migration of electronic documents

– Section 7 - Developing a Long-Term Preservation Strategy

• Development of a preservation policy, quality control, security and monitoring

ISO 18492:2005

Page 37: From ISO to Implementation  A framework for ECM Implementation

IS Holistic Corporate Framework

• A Balance Between the Need for Information to be:– Free and Secure– Available (Short Term and

Long)

Enterprise Classificati

on

Corporate Standards

Polices and Procedures

Regulatory Research

Classification Plan

Retention

Schedules

Records Management Program

Strategic Records

Improvement Program

Information Security Program

Holistic Framework for

Information Security

Software Requirements

Softwar

e Selectio

n

Document Type

Classification

Taxonomy and Metadata Hierarchy

Technical Architectur

e

ECM Program

and Software

Installation

Business Process

Management

Page 38: From ISO to Implementation  A framework for ECM Implementation

Software Requirements

Software Requirements

Software Selection

Page 39: From ISO to Implementation  A framework for ECM Implementation

Software Requirements

• Outline everything related to Data Management and Records Management– Version Control– Workflow (simple and advanced)– Classification– Records Management– System Requirements– Office Integration (MS Office, Lotus)– Imaging– Reporting– Company Background

Enterprise Classificati

on

Corporate Standards

Polices and Procedures

Regulatory Research

Classification Plan

Retention

Schedules

Records Management Program

Strategic Records

Improvement Program

Information Security Program

Holistic Framework for

Information Security

Software Requirements

Softwar

e Selectio

n

Document Type

Classification

Taxonomy and Metadata Hierarchy

Technical Architectur

e

ECM Program

and Software

Installation

Business Process

Management

Page 40: From ISO to Implementation  A framework for ECM Implementation

Software Requirements

• Feature Comparison• Weighting of Requirements• Results in Scores for Each

Category

RMS/DMS Business and Hummingbird Open Text Humbird LivlinkFunctional Requirements Rank Enterprise 2004 Raw

ScoreLivelink RM Raw

ScoreFactor Score Score

3.03.01 Does this RMS/DMS system provide for

management of physical objects (PaperReports, Drawings, Microfilm, Other)?

High RM handles records of any physical or electronic media type. Additionally you can create, categorize, manage and find records from content authoring and e-mail tools,Web browsers, and mobile devices

8 Yes, Livelink Records Management provides the ability to profile and manage any physical record type including paper, reports, drawings, microfilm, boxes, folders, CDs, books, etc. Additional descriptive metadata may be added to further identify and index physical record holdings.physical objects are managed in Livelink records management. Physical Objects are created and managed in the same manner as any object (document) in Livelink.

8

3 24 24

RECORDS AND DOCUMENT MANAGEMENT FUNCTIONALITY

Page 41: From ISO to Implementation  A framework for ECM Implementation

Software Selection

• Establish Your Wish List of Requirements

• Poll Departments for their Requirement

• Develop A Committee– Must have buy in at all levels

• Requirements Matrix– Weight Your Choices– Score and Compare– Final Selection Driven By Metrics

Enterprise Classificati

on

Corporate Standards

Polices and Procedures

Regulatory Research

Classification Plan

Retention

Schedules

Records Management Program

Strategic Records

Improvement Program

Information Security Program

Holistic Framework for

Information Security

Software Requirements

Softwar

e Selectio

n

Document Type

Classification

Taxonomy and Metadata Hierarchy

Technical Architectur

e

ECM Program

and Software

Installation

Business Process

Management

Page 42: From ISO to Implementation  A framework for ECM Implementation

ISO 14721 – Open Archival Information Systems

• What is it?– Open – reference model is an

open model– Archival – defines the

preservation of information– Information Systems – hardware/

software– Reference Model

• Abstract representation of entities and their relationships

ISO 14721

Page 43: From ISO to Implementation  A framework for ECM Implementation

ECM Implementation

Document Type Classification

Taxonomy and Metadata Hierarchy

Technical ArchitectureECM Program and Software

Installation

Page 44: From ISO to Implementation  A framework for ECM Implementation

IEC 82045 – Technical Standard For Document Management

• Technical Product Standard

• Standards for Document Management:– Standard Principals– Meta Data Elements– Information Reference Model– Industry Specific Standards (i.e.

construction)

IEC 82045

Page 45: From ISO to Implementation  A framework for ECM Implementation

ISO 9001 – Quality Management Standard

• Continuous Process Improvement:– Best used with workflows in an ECM

environment

• Map Your Processes First

• Review it

• Change the Process (Streamline)

• Build Your Workflow (Last!)

ISO 9001

Page 46: From ISO to Implementation  A framework for ECM Implementation

ISO 19005-1 – Electronic File Format Long Term Preservation

• Document Management Standard:– Long term preservation of information

• Defines the PDF/A File Format

• Framework for the Context and History of a Document

ISO 19005-1

Page 47: From ISO to Implementation  A framework for ECM Implementation

Document Type Classification

• Document Types:– Drive Profiles (Livelink ECM –

eDOCS)– Determine if Meta Data is Applied

or Captured• Applied Meta Data is Inherited• Captured is obtained at creation

(profile form)

– Have a strong influence on your Taxonomy Structure

Enterprise Classificati

on

Corporate Standards

Polices and Procedures

Regulatory Research

Classification Plan

Retention

Schedules

Records Management Program

Strategic Records

Improvement Program

Information Security Program

Holistic Framework for

Information Security

Software Requirements

Softwar

e Selectio

n

Document Type

Classification

Taxonomy and Metadata Hierarchy

Technical Architectur

e

ECM Program

and Software

Installation

Business Process

Management

Page 48: From ISO to Implementation  A framework for ECM Implementation

Taxonomy and Meta Data

• Taxonomy is a Hierarchical Collection– Structure (i.e. folders)– Documents

• Contains Meta Data About the Subject and Document

Enterprise Classificati

on

Corporate Standards

Polices and Procedures

Regulatory Research

Classification Plan

Retention

Schedules

Records Management Program

Strategic Records

Improvement Program

Information Security Program

Holistic Framework for

Information Security

Software Requirements

Softwar

e Selectio

n

Document Type

Classification

Taxonomy and Metadata Hierarchy

Technical Architectur

e

ECM Program

and Software

Installation

Business Process

Management

Page 49: From ISO to Implementation  A framework for ECM Implementation

Technical Architecture

Enterprise Classificati

on

Corporate Standards

Polices and Procedures

Regulatory Research

Classification Plan

Retention

Schedules

Records Management Program

Strategic Records

Improvement Program

Information Security Program

Holistic Framework for

Information Security

Software Requirements

Softwar

e Selectio

n

Document Type

Classification

Taxonomy and Metadata Hierarchy

Technical Architectur

e

ECM Program

and Software

Installation

Business Process

Management

Page 50: From ISO to Implementation  A framework for ECM Implementation

ECM Program Implementation

• Confluence of:– Records Management– Security– Taxonomy and File Classification

• Change Management

• User Training– General and Specific

Enterprise Classificati

on

Corporate Standards

Polices and Procedures

Regulatory Research

Classification Plan

Retention

Schedules

Records Management Program

Strategic Records

Improvement Program

Information Security Program

Holistic Framework for

Information Security

Software Requirements

Softwar

e Selectio

n

Document Type

Classification

Taxonomy and Metadata Hierarchy

Technical Architectur

e

ECM Program

and Software

Installation

Business Process

Management

Page 51: From ISO to Implementation  A framework for ECM Implementation

Business Process Management

Business Process Management

Page 52: From ISO to Implementation  A framework for ECM Implementation

Business Process Improvement

• Process Mapping– Stakeholder Interviews– Information Sources– Security Issues

• Review it• Map it• Refine it• Build it

Enterprise Classificati

on

Corporate Standards

Polices and Procedures

Regulatory Research

Classification Plan

Retention

Schedules

Records Management Program

Strategic Records

Improvement Program

Information Security Program

Holistic Framework for

Information Security

Software Requirements

Softwar

e Selectio

n

Document Type

Classification

Taxonomy and Metadata Hierarchy

Technical Architectur

e

ECM Program

and Software

Installation

Business Process

Management

Page 53: From ISO to Implementation  A framework for ECM Implementation

Recap

Enterprise Classification

Corporate Standards Polices and Procedures

Regulatory

Research

Classification PlanRetention Schedules

Records Management

Program

Strategic Records Improvement

Program

Information Security Program

Holistic Framework for Information Security

Software Requirements

Software Selection

Document Type Classification

Taxonomy and Metadata Hierarchy

Technical Architecture

ECM Program and Software Installation

Business Process Management

Page 54: From ISO to Implementation  A framework for ECM Implementation

From ISO to Implementation From ISO to Implementation A framework for ECM A framework for ECM

ImplementationImplementation

George [email protected]

Education Code: TR1-1315

Please Complete Your Please Complete Your Session EvaluationSession Evaluation


Recommended