Enterprise Information Governance Framework

A practical enterprise framework for governing information as an organisational asset, strengthening accountability and building the foundations required for AI, privacy, cybersecurity and trusted decision-making.

InfoGovANZ has published Version 1.0 of the Enterprise Information Governance Framework – Parts I and II, establishing a practical governance architecture for organisations seeking to govern information as an organisational asset.

The Framework addresses a persistent enterprise problem: responsibility for information is distributed across business areas and specialist disciplines including Data Governance, Records and Information Management, privacy, cybersecurity, legal and regulatory compliance, risk, technology and AI governance. Each performs an essential role, but organisations also need a mechanism that connects these responsibilities, establishes clear accountability and provides an integrated enterprise view of information value, quality, risk, lifecycle obligations and dependencies.

The Framework defines Enterprise Information Governance as:

Information Governance is the enterprise governance discipline and coordinating mechanism through which an organisation governs the creation, collection, use, sharing, protection, retention and disposal of information as an organisational asset, to maximise value and support trusted decision-making while effectively governing information risk throughout its lifecycle.

Parts I and II establish the Framework’s foundation and enterprise governance system, including:

• seven Enterprise Information Governance Principles;
• governing-body oversight and accountable executive leadership;
• a robust cross-functional Information Governance Committee;
• information ownership and decision rights;
• an enterprise Information Governance Program of Work;
• integration with Enterprise Risk Management;
• information culture and capability;
• monitoring, review, control testing and internal audit; and
• a federated Enterprise Information Asset Register providing enterprise visibility of material information assets and dependencies.

AI and agentic AI make these foundations increasingly important. AI systems depend on organisational information, and increasingly capable systems may retrieve information, interact with enterprise systems, use tools and take authorised actions. Effective AI governance therefore depends on wider Information Governance foundations including clear ownership, reliable information, defined access and decision rights, lifecycle controls, monitoring and accountability.