> I work for a utility company currently going through a Data Governance & Privacy Compliance Audit which, in addition to records retention policies, involves information holdings categorization policies, data classification systems (security level of data) and implementing those documented security requirements, privacy policies, data protection measures, documentation of employee training  etc. This covers an enormous amount of data (electronic and physical), and is a daunting task for IT, Records, Legal and Compliance areas. I would be interested in talking to or getting feedback from any companies - preferably utility - or government entities, that have had any experience going through something similar to this. Recommendations on approach (phasing, determining scope etc..), what type of issues and challenges are being faced by others, how far along the maturity curve are you, how long does this type of effort usually take, any suggestions of source data for benchmarking or best practices in this area, any recommendations of vendors or consultants who have experience in this? 
> I know this is a very broad request but we would be interested in hearing input on any of the above areas if you have been through, or are going through, the very rigorous demands data governance places on a company!    
> 
> Thank you
> Ruth Hurst
> Team Leader, Document Services
> Nevada Power Company
> Phone: 702-367-5028
> Fax: 702-579-0964
> 
> 

List archives at http://lists.ufl.edu/archives/recmgmt-l.html
Contact [log in to unmask] for assistance