Enterprise Information Management
The Enterprise Information Management (EIM) capability is the ability to establish effective systems for gathering, analysing, disseminating, exploiting, and disposing of data and information. The data can be held in any medium — all forms of digital storage, film, paper, or any other recording mechanism used by the organization. The Enterprise Information Management (EIM) capability covers the strategic, operational, and security aspects of information management:
- Establishing an information management strategy.
- Establishing data and information governance mechanisms.
- Establishing information management standards, policies, and controls.
- Performing information valuations.
- Defining and maintaining master- and metadata — for example, metadata for information security classifications and continuity management.
- Making infrastructure and storage decisions.
- Managing data and information life cycles, including data and information tracking.
- Establishing information quality with inputs from stakeholders.
- Measuring how frequently information is accessed and assessing its value to the business.
- Analysing information, including exploratory and confirmative data analysis.
- Developing the skills and competences of information management and analytics practitioners.
Structure
EIM is made up of the following Categories and CBBs. Maturity and Planning are described at both the CC and the CBB level.
- AStrategy and Organization
Sets out the objectives of information management in the organization, and the governance and organizational framework for the information management activities.
- A1Information Management Strategy
Define the long-term value and competitive positioning objectives for the management, sources, and uses of information.
- A2Information Governance
Develop and implement authorization and decision-making approaches that are executed through organizational structures and activities.
- A3Communities of Practice
Build, foster, and maintain the sharing of good information management practices among employees.
- A4Leadership
Promote the adoption of information management practices.
- BStandards, Policies, and Controls
Identifies and reviews applicable legislation and standards, and develop and implement compliant policies and controls for the management of information.
- B1Standards and Policies
Develop and communicate standards and policies for information management (including data definitions, taxonomies, models, usage patterns, archiving policies and schedules, information policies, roles and rights), and key process indicators (such as service levels for all data and information-based services, and cost of ownership).
- B2Controls
Establish a control framework for information management, which may include ways to monitor effectiveness and efficiency, manage change, and control access, as well as guidance on data and information use.
- CInformation Management
Addresses the day-to-day activities of collecting, processing, storing, securing, and managing the end of life of data and information.
- C1Information Valuation
Establish and update the value of data and information assets based on criteria such as economic, financial, reputational, and technical risk, age, frequency of use, and position within the information life cycle.
- C2Master Data Management
Define and maintain one or more master datasets, and synchronize them across relevant processes and systems. Define the data patterns and the quality standards to which data must conform in each stage of its life cycle.
- C3Metadata Management
Define and update metadata that indicates the information life cycle stage and access control criteria for both business and technical data.
- C4Information Quality
Establish policies that promote data and information quality.
- C5Information Life Cycle Management
Define and manage the life cycle for business, technical, and forensics data and information to ensure that it is accurate, available, and accessible, and that it is removed at the end of its useful life. Life cycle management extends to archive maintenance.
- C6Business Continuity Management
Provide information to business continuity planning on the data and information that is needed to support various business functions and activities.
- C7Information Security
Provide oversight, processes, and tools to enable the security, availability, integrity, and accessibility of information throughout its life cycles.
- DEnabling Business Analytics
Promotes the development and use of competences and applications to support the analytical use of data and information for business intelligence.
- D1Competences and Tools
Develop competences and tools for information management, business intelligence, and analytics to support decision-making.
- D2Data Provision
Provide data for reporting and analysis purposes.
- D3Reports and Analytics
Provide reports for representing and interpreting business information.
Overview
Goal
The Enterprise Information Management (EIM) capability ensures that quality data is available to support the business activities of the organization.
Objectives
- Improve the quality of information available at all levels of the organization to support improved decision-making and business insights.
- Improve the efficiency of business processes by making data and information available that is fit for purpose.
- Provide flexible, dynamic, and centralized data platforms that enable stakeholders to access, interpret, and manipulate data as appropriate to their roles.
- Enable the analysis of data and information to improve the identification and exploitation of new business opportunities by the provision of an appropriate linked data platform.
- Safely and effectively manage data and information throughout their life cycles.
Value
The Enterprise Information Management (EIM) capability provides appropriate operational data for business transactions, and consistently enables timely and informed decision-making.
Relevance
Data is the lifeblood of any business. It is obtained from many disparate, often discrete, sources: emails, business transactions, operational processes, websites, and so on. In this era of big data, the volume, speed, and variety of data and information continue to increase. In addition, the regulatory and legal requirements relating to data retention and privacy are becoming more complex. For data to be of benefit, it has to address the needs of the organization's employees and customers. It has to be accurate, understandable, and accessible. A life cycle approach to managing data and information1 can be effective, as this can help inform an understanding of what data is currently stored where and its value to the organization23.
By establishing an effective Enterprise Information Management (EIM) capability, an organization can manage potential information risks, support ongoing business operations, and enable the strategic development of the organization4. It can lead to employee and customer productivity improvements, as better knowledge leads to improved decision- making5, fewer mistakes, deeper insights, and identification of new opportunities.
Scope
Definition
The Enterprise Information Management (EIM) capability is the ability to establish effective systems for gathering, analysing, disseminating, exploiting, and disposing of data and information. The data can be held in any medium — all forms of digital storage, film, paper, or any other recording mechanism used by the organization. The Enterprise Information Management (EIM) capability covers the strategic, operational, and security aspects of information management:
- Establishing an information management strategy.
- Establishing data and information governance mechanisms.
- Establishing information management standards, policies, and controls.
- Performing information valuations.
- Defining and maintaining master- and metadata — for example, metadata for information security classifications and continuity management.
- Making infrastructure and storage decisions.
- Managing data and information life cycles, including data and information tracking.
- Establishing information quality with inputs from stakeholders.
- Measuring how frequently information is accessed and assessing its value to the business.
- Analysing information, including exploratory and confirmative data analysis.
- Developing the skills and competences of information management and analytics practitioners.
Improvement Planning
Practices-Outcomes-Metrics (POM)
Representative POMs are described for EIM at each level of maturity.
- 2Basic
- Practice
- Ensure management is involved in the development of information management policies, standards, and controls.
- Outcome
- Confidence in a business-focused Enterprise Information Management (EIM) capability grows.
- Metric
- Percentage of relevant stakeholders participating in the approval of information management policies, standards, and controls.
- Practice
- Clearly define information management roles, and provide training for data stewardship, quality, and security.
- Outcome
- Employee competences are improved, and employees take ownership of, and responsibility for, data and information services.
- Metrics
- Stakeholder satisfaction with data and information availability.
- Number of roles identified.
- Number of training programmes offered.
- Practice
- Develop and implement a life cycle approach for the management of the most critical and voluminous data and information.
- Outcome
- Data begins to be properly curated and deleted as appropriate — that is, the organization knows when it is safe to delete data (all uses are complete) and what data is due for deletion (for example, a personal data retention policy states the data must be deleted).
- Metrics
- Percentage of data sets managed following a life cycle approach.
- Data sets assigned to a life cycle phase as a percentage of all data sets.
- Practice
- Encourage business unit leaders and champions to promote business intelligence and analytics.
- Outcomes
- Local business intelligence and analytics activities deliver local gains and enhance expertise.
- The application of statistics to support decision-making is growing.
- Metrics
- Percentage of employees with formal enterprise information management, business intelligence, or analytics training and qualifications.
- Number of reports using analytics.
- Number of decisions routinely supported by business intelligence and analytics.
- 3Intermediate
- Practice
- Promote regular alignment of information management, business intelligence, and analytics activities with business objectives.
- Outcome
- Information management services meet the needs of most stakeholders.
- Metric
- Number of major business intelligence goals and analytics-specific goals set by the business and met by using IT-enabled analytical services.
- Practice
- Promote metadata and master data management to improve information quality.
- Outcome
- Information quality issues can be systematically addressed and improved.
- Metrics
- Transaction data quality — for example, the number of transactions needing rework.
- Analytical data quality — quality should be looked at in terms of fitness for purpose.
- For example, marketing may be happy with a 10 per cent accuracy variance, whereas inventory management may want less than 1 per cent variance.
- Practice
- Ensure employees that are assigned to information management roles are suitably qualified and their performance is managed.
- Outcome
- Reliable and professional information management services develop.
- Metric
- Stakeholder satisfaction with data and information management services, as indicated by survey results.
- Practice
- Apply a life cycle approach for information management to most data and information.
- Outcome
- The organization moves from a reactive to a proactive approach to managing key quality attributes of data and information.
- Metrics
- Data sets whose life cycles are defined and managed as a percentage of all data sets throughout the organization.
- Number of systems requirements, policy, and process documents referring to information life cycles.
- 4Advanced
- Practice
- Develop a rolling multi-year planning cycle for the information management strategy.
- Outcome
- Adopting a longer term strategic focus will help deliver greater value over time.
- Metric
- Number of years covered by the rolling information management strategy.
- Practice
- Use cross-functional teams to collectively manage data and information acquisition, storage, and retrieval costs.
- Outcome
- Investment decisions can be more holistic and business value-focused.
- Metrics
- Percentage of data sets assigned to life cycles with associated acquisition, storage, and retrieval costs.
- This can be measured at architectural, database, file, view, transaction, or field level.
- Practice
- Implement data classifications and access controls in metadata.
- Outcome
- The management of information artefacts is facilitated.
- Metrics
- Percentage of data with associated classification and access control metadata.
- This can be measured at architectural, database, file, view, transaction, or field level.
- Practice
- Design, implement, and manage life cycles for business, technical, and forensics information.
- Outcome
- Cost-effective, well-managed information life cycles ensure information is available when, where, and how it is needed.
- Metrics
- Percentage of data assigned to life cycles with associated acquisition, storage, and retrieval costs.
- Number of storage platform moves related to life cycles — that is, does data need to be located in the fastest (usually most expensive) storage or is there a phased movement of data to secondary and lower tier (archival storage) over its life cycles to manage cost?
- Practice
- Encourage management to set ambitious organization-wide business intelligence and analytics targets.
- Outcomes
- Business intelligence and analytics efforts are focused on issues identified as important by senior management.
- This focus helps to develop relevant skills, tool usage, and problem solving techniques.
- Metric
- Number of business intelligence and analytics targets.
- 5Optimized
- Practice
- Regularly review and update information management policies, standards, and controls.
- Outcome
- Continually validating compliance with legal, regulatory, and industry standards reduces risk and enhances reputation.
- Metric
- Number of compliance issues raised per reporting period.
- Practice
- Review information life cycles to maintain their extensibility and flexibility.
- Outcomes
- New opportunities can be more readily seized where there are flexible data platforms that enable access, interpretation, and manipulation of data by stakeholders.
- Extensible life cycles can easily be expanded to include new features or life cycle steps.
- Metric
- Number of business opportunities that can be pursued because of the availability of flexible data platforms.
Reference
History
This capability was introduced in Revision 16 as a new critical capability.
It was deprecated in Revision 18.10, being updated by Enterprise Information Management (18.10).