2. PETER GRIMMOND
………………………………………………
HEAD OF TECHNOLOGY, EMEA
SYMANTEC
e. peter_grimmond@symantec.com
m. + 44 7770 963352
Information governance: gain visibility, take action, assume control

3. CHRIS LEATHER
………………………………………………
GROUP HEAD OF INFORMATION
SECURITY
BALFOUR BEATTY
e.chris.leather@balfourbeatty.com
m. +44 7500 765880
MICHAEL MORITZER
………………………………………………
HEAD OF DATA QUALITY
GOVERNANCE
RAIFFEISEN BANK INTERNATIONAL
e.michael.moritzer@rbinternational.com
m. + 43 171 707 5771
PAULO MONIZ
………………………………………………
SUB DIRECTOR FOR
INFORMATION SECURITY AND
IT RISK
EDP
e.paulo.moniz@edp.pt
m. +35 121 001 7805
SUJIN BALAKUMARAN
………………………………………………
VP – IT SECURITY AND
GOVERNANCE
WAHA CAPITAL
e.sujin.balakumaran@wahacapital.ae
m. +97 1506683925
PIERLUCA RIMINUCCI
………………………………………………
CTO
PRADA
e. pierluca.riminucci@prada.com
m. +39 3450 222 836
ADAM BURNS
…………………………………………………
ROUNDTABLE MODERATOR
MeetTheBoss TV
LinkedIn Profile
Information governance: gain visibility, take action, assume control

4. …………………………………………………………………….……………………………………………………………………………………………………
* IG is a priority because… “As a group of banks, we are
being confronted with more and more regulatory
requirements, reporting requirements, what data we
have to have available when and where and in what
granularity … so there is a growing regime of data
hunger … all of the data that we have to make available
has to be correct, unambiguous, and complete. And
that’s actually a big challenge.”
* Challenge isn’t restricting access to data, but ensuring
that the version of the data accessed is correct (“where
did it come from, what is the calculation rule that
applies”).
* Re: cost of managing data… Tells a story about
Austrian government stopping collecting all telecoms
data as it was too much and not useful. “The key
question here is: is it wise to collect data in advance,
although you don’t know yet whom and for what purpose
might use the data later on? We are rather refraining
from such an approach.”
* Most pressing IG challenge… “We still have so many
unstructured, disconnected data flows around.”
* Shares analogy of data and traffic management:
motorway (data warehouse) is high performance shared
infrastructure and easy to manage with a camera (but
it’s expensive to build). Local roads are harder to
manage, but less expensive to build. Off road (ad hoc
Excel spread sheet) is impossible to manage but costs
nothing to build.
* When developed an enterprise data model for the
warehouse infrastructure, found there are different
views on same data. “The risk view is different to the
business view … [and] due to that view, that data gets
transformed in a way that prohibits later reconciliation,
and this is counter-productive.”
Believes you should classify data “at the point where
data is entered into a system.”
* If you had 10% extra budget to spend on IG, where
would you spend it? Data exploration.
…………………………………………………………………….……………………………………………………………………………………………………
* “Information governance is now a priority because we are
losing control of information.” This is happening in two
ways… 1) the cloud and 2) big data (“because of the idea
that data can be anywhere and anyone can do analytics”).
* “It is our [IT team] responsibility as a corporate direction
to establish this governance, but we cannot do it without
the business”.
* Another reason why IG is needed… business
departments going straight to third-party service providers
and bypassing IT.
* Most pressing IG challenge… “Is about data retention …
because we are increasing – incredible – the data volume
inside our datacentre. And everybody wants to do
backups, but they don’t know why.” Plus: “we need to
understand very well what we put in cloud”.
* Long-term challenge is big data. When everybody has
data analytics capability to increase efficiency, “we get
problems in data governance”.
* Re: classification – has found that it is “very difficult” for
people “at the origin of the data to classify the data
because it is something that you have in your day-to-day
and people don’t want to think about that. Describing the
data is more natural, more easy.”
* This approach (describing data) may also help with data
loss prevention, as “automatic find tools” will be more
effective.
* “When you adopt classification, you should not try to
categorise to too many levels. Don’t make it complex.”
* If you had 10% extra budget to spend on IG, where
would you spend it? Data architecture.
MICHAEL MORITZER
HEAD OF DATA QUALITY
GOVERNANCE
RAIFFEISEN BANK INTERNATIONAL
PAULO MONIZ
SUB DIRECTOR FOR INFORMATION SECURITY AND IT RISK
EDP

5. …………………………………………………………………….……………………………………………………………………………………………………
* IG is a priority because… “More and more processes
are getting integrated to the system and information is
jewellery for the corporate these days … definitely
that’s [IG] going to be one of the priorities.”
* Re: cost of managing data… “It’s not the direct cost of
the storage … it’s about the management of that data
and how we use the data. What is the purpose of
storing useless data? This is a whole aspect of data
management or information management policies.”
* Most pressing IG challenge… “Right now … the most
challenging thing for us is data retention policies.” Long
term, would like a “solution for intelligent data
management … and if you can plug in this to retention
policies … [so it would be] structuring the data
automatically, cleansing the data automatically, coming
up with suggestions for the retention plans…”
* Believes all organisations today need data architects in
place to analyse data.
* Better classification and user education (to create “a
culture for data classification”) are “really” important.
* If you had 10% extra budget to spend on IG, where
would you spend it? Data architecture.
* Most pertinent challenge around IG: “We are looking at
the best way to use it [data]”. Believes that, despite data
collection happening since the mid-90s with loyalty cards,
“still there is a struggle”. This is because, even though
most organisations now have more data, it is
“disconnected” and “they’re not making best use of it.”
* Re: cost of managing data… “Data is stored just in case
… to store data you need to have a vision for the purpose
of it … this is an enterprise data model.”
* Most pressing IG challenge… “The biggest challenge in
my mind, and the one I am trying to push with the
organisation, is to transform data into information.” Prada
is “amongst other things” a retail organisation. It does its
business intelligence on sales data, but there are other
processes that have not been integrated (for example,
people counter and shop window dressing). If one could
extract this data: “there is a lot of value in that”.
…………………………………………………………………….…………………………………………………………………………………………………
* Also agrees with Sujin: “there is a need for an enterprise
data architect”.
* Mid-term challenge… To put in place end-to-end data
governance: “many pieces of data live on their own, and
there is a lot of overlap … there is no clarity on who owns
data and what is the data lifecycle.”
* Believes describing rather than classifying data may be
a good first step towards end-to-end data governance.
But… type of classification does depend on the purpose
for it (if you need to retain the data, you may need “a quite
high level classification category”).
* “If companies had a very effective way to classify their
own data, then the next step, how to use this data more
effectively, becomes much easier.”
* If you had 10% extra budget to spend on IG, where
would you spend it? Data architecture.
SUJIN BALAKUMARAN
VP – IT SECURITY AND
GOVERNANCE
WAHA CAPITAL
PIERLUCA RIMINUCCI
CTO
PRADA

6. * IG is a priority because… “This does vary according
to the sector that you’re in … the sector I’m currently
in, construction and engineering, very unregulated,
very low maturity in terms of technology and
understanding valuation of data. More of the focus of
our business is on simplistic services … the
challenges that we have are much more fundamental:
getting general control and visibility and
understanding of how our users want to operate.”
* Another reason… “Security … particularly at board
level.”
* Most pressing IG challenge… Going through a
turnaround phase and moving from federated to
centrally driven, regionally managed structure. “As
part of that, one of the things being considered is how
we better apply information governance.”
* “We’re looking at the real challenge we have of
discovery and visibility of our data and how much
confidence we can have in it, particularly from a long
time ago” (projects can run for a number of years).
* Question is “how much can we reverse engineer
pragmatically into legacy data and frankly how much of
that is sacrificial and we don’t really need.”
* Mid- to long-term challenge… In face of dynamic work
environment: “how we maintain an effective IG
approach over that time”.
* “Staggered” at amount of time US e-discovery teams
are spending. How much should be done by the
business, and how much by IT?
* If you had 10% extra budget to spend on IG, where
would you spend it? A long-term awareness and
training programme.
………………………………………………………………….……………………………………………………………………………………………………
CHRIS LEATHER
GROUP HEAD OF INFORMATION SECURITY
BALFOUR BEATTY