Physical Security

Sharing is not always caring

by Mark Rowe

Sharing is not always caring in the public sector, writes Phil Greenwood, Director at the data and information storage contract company Iron Mountain.

A report by the Local Government Association (LGA) last year found that shared services are so embedded across local authorities that they have become standard practice. The LGA‘s shared services map shows that the vast majority of councils are working together in some form to save money.

There are over 400 local authorities in the UK and each are charged with delivering around 800 services, including public transport, local amenities, education, social services, maintenance of roads, among many others. With the pressure on councils to improve services , increase collaboration and save money, shared services have become a popular reform for public agencies and the scheme has so far saved UK tax payers half a billion pounds.

The hope is to reduce overheads and increase efficiency by consolidating support services like HR, finance and procurement, as well as back office services and customer services, the maintenance of databases for children and young people, public health services, and community information systems. However, results from a recent survey from Iron Mountain suggest that, despite the considerable benefits across many functional areas, sharing services across neighbouring authorities might not deliver the greatest advantages for information management and security.

Shared concerns

New research[iii] from Iron Mountain around information management in the UK local authorities and beyond shows that the benefits of sharing are questioned by many front-line information professionals, with concerns about information loss highlighted by almost half (49pc) of those surveyed. We found that around nine (92pc) in ten local authorities currently share or plan to share some of their services with neighbouring local authorities. Just under half (44pc) of Records and Information Management (RIM) staff welcome the greater efficiencies and best practice that come from shared services.

However, we found that concerns exist amongst information professionals and their managers over whether sharing services delivers key information management benefits such as reduced workload, improved performance, mutual support between professionals, or effective integration of information across authorities. In fact, in each case only around one in three of the RIM professionals surveyed expect to experience such benefits. The more senior business leaders on the other hand, are inclined to view the achievement of these benefits more optimistically.

Integration risks

One of the main concerns highlighted by the research is that the need to move information between organisations places it at greater risk of loss or exposure, with almost half (49pc) of records and information managers, and a third of business leaders believing this is an issue. Worries exist about the lack of accountability, or too many points of accountability, that can make it impossible to maintain a continuous and secure chain of custody as information moves between local councils sharing services. Such a situation could result from different local authorities and their partners taking different approaches to information storage and security.

Impact of inconsistency

Every organisation has unique business challenges and goals, and good information governance should address the specific information requirements of that organisation. However, the survey reveals that an inconsistent approach to information management, with different local authorities dealing with information in different ways, is one of the greatest challenges of sharing services. Around one-in-three respondents agreed that the differing information security approaches are potentially exposing information to risk. We also found that three quarters (74pc) of respondents agree that a lack of budget and skills is holding back their ability to make the most of their information. As a result, a third (34pc) of information professionals want their organisation to decide how best to manage its information. The same number (33pc) would welcome the opportunity to collaborate with records and information managers in other local authorities, but on their own terms, through networking and the sharing of ideas and best practice.

Tips for a shared future

Local authorities clearly recognise the importance of good information management and are keen to manage information effectively and securely. But what actions can local authorities take to improve the outcomes for shared services projects by overcoming the obstacles outlined above? Our research suggests that the risk of security breach and loss of information is increasing. Any resulting reputational damage would be extremely unwelcome for councils should the worst happen, and managers are therefore urged to take into account the following best practice.

– Conduct an audit – to improve the way your organisation handles information, you need to be aware of existing governance policies and processes.
– Measure change – always measure the ‘before/after’ of any change you make – no matter how small. Benchmark these changes against KPIs such as efficiency.
– Take control – lead by example by demonstrating the importance of good information management – particularly when it comes to reducing risk. Remind your team to log where documents are at all times, keep sensitive information secure, change passwords and lock computers.
– Raise awareness of success – efficient processes and information security are critical to your and your council’s reputations. When you make improvements, spread the word.

Overcoming the inherent barriers that hold shared services back is the key to realising the vision of shared services in the public sector. By empowering managers to take control of the information they handle, a continuous chain of information custody can be created that will drive cultural change, and ultimately reduce information risk.

Note: research was by Coleman Parks on behalf of Iron Mountain in January 2016. The 205 interviews were split evenly between Records Managers and Lines of Business staff at local authorities in the UK. Lines of business staff included those with the following job titles: Director of ICT, CIO, Finance Director, Director of Strategy and Transformation, Head of Quality Assurances and Commercial Director. In this article ‘business leaders’ refers to LOBs (Lines of Business staff).

Related News

Newsletter

Subscribe to our weekly newsletter to stay on top of security news and events.

© 2024 Professional Security Magazine. All rights reserved.

Website by MSEC Marketing