DESCRIPTION
Risk does not manage itself. For IG professionals, understanding how risk is identified, assessed, and controlled is essential to building programs that are not just compliant but defensible.This session provides a practitioner-focused overview of risk and security as they apply to information governance. Participants will explore the security roles and frameworks IG leaders are most likely to encounter, the physical and technical controls that underpin protection programs, and the metrics used to evaluate and benchmark security performance.Designed for IG professionals, this session focuses on the oversight role: confirming that controls exist, identifying accountability gaps, and asking the right questions of technical teams.
Learning Objectives
Upon completing this session, attendees should be able to:
- Explain the steps of a risk assessment and describe how risk posture evaluations are used to inform IG program decisions.
- Identify common information protection strategies and the accountability models that ensure ownership and enforcement.
- Differentiate between access control models and recognize their relevance to IG oversight.
- Recognize major security roles and the frameworks that guide them, and assess whether responsibilities are clearly assigned within an organization.
- Interpret risk and security metrics to evaluate whether an organization's controls align with its stated risk appetite.
ABOUT
Format
On Demand Webinar
Language
English
Year Published
2026
Credits
1.0 IGP-INFO SECURITY
About this Series
This session is part of ARMA’s IG Mastery Webinar Series, a collection of SME-led overviews that introduce each unit of the upcoming IG Mastery Course, launching mid-2026. Each webinar highlights the most important concepts, frameworks, and practical insights from its unit, offering a high-value preview for anyone interested in strengthening their IG knowledge.You may purchase individual webinars or the full series as a discounted bundle.
