Table 2:
Principles of the proposed model.
| Accountability | A legally responsible and accountable executive member of senior management shall control the IG program and delegate the responsibilities. |
| Transparency | Processes and activities related to an organization's IG program shall be developed in a clear manner. These documents shall be available to the staff and other stakeholders with regard to legal or regulatory restrictions and in line with business needs. |
| Integrity | The IG program shall be developed in a way that ensures information reliability during the process of information creation, storage, and presentation. |
| Compliance | The IG program shall be in compliance with organizational laws, regulations, standards, and policies. |
| Data and information quality | Accurate, up-to-date, relevant, and sufficient data and information shall be collected, stored, and retained. |
| Data and information protection | The IG program shall ensure an acceptable level of protection against infringement, corruption, and lack of information that is private, confidential, classified, and necessary for the continued operation of the organization. Data protection and attention to the security and confidentiality of data and information shall be regardless of the media type when creating, presenting, and even removing information. |
| Data and information accessibility | An organization shall retain information in a way that ensures timely, accurate and efficient data recovery. In order for effective management of information accessibility, an organization shall eliminate additional and obsolete data and information at regular intervals. |
| Data and information retention | Considering the legal, regulatory, financial, and operational requirements, an organization shall retain its information for an appropriate period of time. |
| Data and information elimination | An organization shall adhere to organizational rules and policies to safely and appropriately eliminate unnecessary information. At the end of the information retention period, additional and unnecessary information shall be eliminated. |
| Legality of data processing | The data shall be processed fairly and in accordance with the legal objectives and policies of the organization. |
| Monitoring and auditing | Compliance with policies and standards, staff performance, access to and use of information and other informational media, the use of technologies such as Document Analytics shall be monitored. |
| Continuous improvement | The IG program shall be reviewed regularly and periodically in order to be modified and improved based on defects, workplace changes, new technologies, and organizational strategies. |