Information governance programs rarely fail because the organization lacks policies. They struggle because ownership, priorities and delivery capacity have not been made explicit. These seven questions help leaders see whether the foundations are in place before a major program or technology investment begins.
1. Is there an accountable executive owner?
Governance crosses records, privacy, security, legal, technology and operations. A sponsor must be able to resolve competing priorities and keep the work connected to organizational outcomes—not just compliance activity.
2. Can you describe the highest-risk information?
A useful program starts with material risk. Identify the information that is sensitive, operationally critical, difficult to retrieve or being retained without a clear purpose. This creates focus and makes progress measurable.
3. Are accountabilities clear across the lifecycle?
Creation, access, sharing, retention and disposition often sit with different teams. Document who decides, who performs and who provides oversight at each stage. Gaps here become delays and unmanaged risk later.
4. Do policies match the way people actually work?
Compare formal requirements with the repositories, collaboration tools and workarounds staff use every day. Where the gap is wide, redesign the operating practice rather than relying on more reminders.
5. Is retention executable?
A retention schedule has limited value when it cannot be applied to systems and content. Test whether rules are current, mapped to business activities and supported by defensible disposition processes.
6. Are technology decisions informed by governance requirements?
Governance requirements should shape configuration, migration and ownership before a platform launches. Retrofitting them later is slower, more expensive and harder for users to accept.
7. Is there a phased roadmap with named owners?
Turn the assessment into a sequence of achievable improvements. Each initiative should have an owner, a decision point, a measure and a clear link to business or risk outcomes.
If several answers are unclear, that is useful evidence—not failure. A focused current-state assessment can turn uncertainty into a practical starting point.