What Happened
An organization launched an ambitious Information Governance (IG) initiative focused on compliance controls, audit trails, and regulatory documentation. The program design was technically sound, with clear risks identified and detailed retention schedules built. Executive sponsors signed the charter.
Eighteen months later, the initiative stalled. Department heads stopped attending steering committee meetings. Budget requests went unfunded. The Records Control Schedule sat half-implemented. IT deprioritized the deployment of classification tools.
The failure wasn't technical. The initiative was designed for an integrity-focused, highly regulated business model but deployed at a low-cost provider where operational efficiency drove every decision. Leadership saw the IG program as overhead that slowed operations rather than as infrastructure that enabled the business model.
Timeline
Month 1-3: The IG team designed a comprehensive program emphasizing compliance documentation, audit readiness, and regulatory risk mitigation. The steering committee approved the charter.
Month 4-8: IT began requirements gathering for classification and retention automation. Department heads attended initial training sessions on record declaration and controlled vocabulary.
Month 9-12: Resistance emerged. Operations managers complained that mandatory metadata slowed document creation. Customer service reported that retention requirements conflicted with fast-response workflows. IT reprioritized the classification project behind cost-reduction initiatives.
Month 13-18: Steering committee meetings became sporadic. The budget for the next phase was redirected to supply chain optimization. The Records Control Schedule remained partially deployed in legal and HR only.
Which Controls Failed or Were Missing
The program lacked alignment controls at the design stage:
Business model assessment: The IG team never formally evaluated whether the organization operated as a low-cost provider, innovative excellence company, integrity-focused entity, or trusted adviser. They assumed compliance risk would resonate universally.
Value proposition mapping: The business case emphasized regulatory penalties avoided and audit findings prevented. It didn't quantify information storage costs eliminated or workflow efficiency gained. For a low-cost provider focused on operational efficiency, the compliance argument carried little weight compared to margin pressure.
Stakeholder analysis: The team engaged legal and compliance early but didn't secure buy-in from operations, supply chain, or customer service until implementation began. These departments saw IG as a constraint, not an enabler.
Outcome measurement: Success metrics tracked compliance indicators (retention accuracy, legal hold response time) rather than business-model indicators (cost per transaction, information storage reduction, process cycle time).
What the Standard Requires
The Generally Accepted Recordkeeping Principles don't prescribe specific business-model alignment, but the Principle of Accountability requires that "a senior executive shall oversee the information governance program and delegate program responsibility to appropriate individuals." This accountability only functions when the executive understands how IG advances organizational success within their business model.
The Sedona Conference Commentary on Information Governance explicitly addresses this gap. It identifies four business models and maps IG value propositions to each:
- Low-cost providers adopt IG to streamline information workflows and reduce unnecessary storage costs.
- Innovative excellence organizations use IG to maximize information asset value while minimizing distraction.
- Integrity/ethics companies implement IG as a complement to internal controls and compliance programs.
- Trusted providers strengthen IG to protect information clients entrust to them.
The Commentary doesn't mandate a specific approach, but it establishes that IG initiatives must align with how the organization creates value. A compliance-heavy program designed for an integrity-focused company will fail at a low-cost provider unless reframed around efficiency and cost reduction.
Lessons and Action Items for Your Team
Before you design your next IG initiative:
1. Identify your organization's business model explicitly. Don't assume. Ask your CFO and COO how they describe the company's competitive advantage. Review the last three years of annual reports or board presentations. Look for repeated themes: cost leadership, innovation, regulatory trust, client confidentiality.
2. Map IG value to that model. If you're at a low-cost provider, lead with storage cost reduction and workflow efficiency. Quantify how much you'll save by eliminating redundant information and automating retention. Compliance becomes a secondary benefit, not the primary driver.
If you're at an innovative excellence company, emphasize how IG captures valuable information for reuse while reducing noise. Show how controlled vocabulary and functional classification help product teams find prior research faster.
If integrity drives your model, then yes, lead with compliance risk and audit readiness. But even here, frame it as protecting the brand that customers trust, not just avoiding penalties.
3. Test your business case with operational leaders first. Before you present to executives, run your value proposition past department heads in operations, sales, or product development. If they don't see how IG helps them hit their targets, revise until they do.
4. Align your metrics with business-model indicators. Track what matters to your model. Low-cost providers care about cost per GB stored and time saved in workflows. Innovative companies care about information reuse rates and time-to-insight. Integrity-focused organizations care about audit findings and control effectiveness. Trusted advisers care about client data incident rates and third-party security ratings.
5. Build cross-functional governance from day one. Don't let IG become a legal-and-compliance silo. If your business model depends on operational efficiency, put operations leaders on your steering committee with equal voice to legal. Their priorities will keep you aligned.
The incident described here isn't hypothetical. Variations play out regularly when IG professionals design programs in isolation from business strategy. You can avoid it by treating business-model alignment as a foundational control, not an afterthought. Your IG initiative should swim with the current of how your organization creates value, not against it.
