1. Introduction

The Information and records management standard establishes a formal requirement for organisations to monitor all aspects of their information and records management, “to ensure that it is accurately performed and meets business needs” (section 1.8).

Regular monitoring ensures that information and records are managed efficiently and effectively according to best practice and that this management continues to meet the business needs of the organisation and the requirements of government.

2. Responsibilities

Monitoring the management of information and records in an organisation is a shared responsibility between us and each organisation.

2.1 Our responsibilities

We are responsible for:

• monitoring compliance with the Public Records Act 2005 (PRA), associated standards and instructions

• reporting to the Minister and Parliament about the state of information and records management in the New Zealand public sector

• communicating requirements and timetables for monitoring activities

• providing advice and guidance on how organisations can monitor their own performance

• providing advice and guidance on how organisations can comply with requirements

• following up non-compliance or ineffective management.

2.2 Responsibilities of the organisation

The organisation is responsible for:

• regularly measuring and monitoring the performance of its information and records management

• taking corrective action to address any problems

• cooperating with us in monitoring and reporting on compliance.

3. Monitoring within organisations

Organisations are responsible for measuring and monitoring the performance of their information and records management for planning and improvement purposes. They need to monitor for compliance with the PRA, associated standards and instructions.

We may need to follow up with organisations on non-compliance or failure to effectively manage information and records. If so, an organisation may be asked to report on their monitoring activities and on the corrective actions that were undertaken as a result of monitoring.

3.1 Monitoring performance

Regularly monitoring the performance of the organisation's information and records management not only ensures its continuing value to the organisation but also maximises opportunities for continuous improvement.

Monitoring performance can assist organisations in:

• ensuring that information and records management practices are effective in supporting business processes

• improving service delivery and processes for efficiencies

• identifying and managing risks

• reducing costs

• assessing how well resources have been used.

3.2 Monitoring compliance

Monitoring the organisation's information and records management compliance with the PRA, associated standards and instructions, ensures that the organisation understands its obligations and can address any non-compliance issues. These are important aspects of the governance of any organisation.

Organisations can monitor their compliance by:

• assessing compliance against the PRA

• assessing compliance against the requirements of standards and instructions issued by us

• benchmarking against previous surveys or audit results to assess improvements or to identify issues of non-compliance

• undertaking a compliance assessment or audit using internal auditors or an external party to provide an independent assessment of the organisation's records management programme, practices and systems.

Documenting compliance monitoring activities is an important component in demonstrating the organisation’s compliance with the PRA, associated standards and instructions.