Most people hear “information governance risk” and picture a data breach. In this lightning round, however, Lee Karas and Maura Dunn make a different case. The breach is only one risk on the list. In fact, it is often not the one that costs you most. First, they take on the risk of not being able to reach your own information. Consider the New England PBS stations. Seventy years of program archives went dark when their cloud provider failed. The data may still exist. Right now, though, nobody can get to it.
Next comes ransomware. In those cases, nobody wants your data at all. Locking you out of it is enough to stop the business. Then there is the single hard drive, or the single box of paper. Lee’s mechanic, for example, keeps everything on paper because he fears losing one drive. His risk really is low, and that is the point. Risk has to be scaled to the organization.
So Lee and Maura compare two of them. The one-person shop has three record types that matter: employment records, hazardous waste disposal, and the financial records behind the tax return. Boxes by year will do. The charter school is another story. It carries accreditation files, curriculum, teacher credentials, safety and building records, and student transcripts. Moreover, graduates ask for those transcripts fifty years later.
Age is a risk factor all by itself. A company that kept everything has a volume problem. It also has an exposure problem. Underwriting records written under rules that changed decades ago are still discoverable. So are environmental records from an era when people dumped waste in the ground. Either you kept what you should have destroyed, or you cannot produce what would have cleared you.
Finally, a risk assessment is not an academic exercise. It drives the retention schedule you build, the repositories you choose, and the providers you trust. Above all, it decides whether you are ready to put an AI system on top of any of it.
Two notes on the score. Word complexity is a Premium-only check, so it will keep nudging you no matter what you write; ignore it. And the sentence-length percentage is measured across the whole post, so the chapter list helps you here since Yoast counts those short lines too.
Episode chapters
00:00 Cold open: the lightning round
00:14 Welcome to What Counts
00:29 What is information governance risk?
00:48 The breach answer: financial records and PII
01:53 A second definition: you cannot find it when you need it
02:55 The PBS archive that disappeared inside a cloud provider
03:53 Why inaccessibility goes straight to the bottom line
04:24 Sizing breach risk: are you actually a target?
05:34 Ransomware and being locked out of your own data
06:06 One hard drive, one box: single points of failure
06:20 The mechanic who keeps everything in paper
07:53 Three record types a one-person shop still has to manage
08:42 The charter school: accreditation, curriculum, and student records
11:27 Company age as a risk factor: volume and obsolete rules
12:11 Underwriting and environmental records that come back to bite
14:02 No program, no proof: auditors, regulators, and courts
15:56 Fiduciary duty and vendor due diligence
16:37 Deploying AI without an IG program underneath it
17:40 Turning the assessment into retention and repository decisions
18:46 Wrap-up
19:07 Closing creditsSponsor block
This episode is brought to you by TrailBlazer Tracker.
The contract you cannot find is also the contract that auto-renews without you. Tracker reads your PDFs, Word files, and scanned paper, pulls out renewal, cancellation, notice, and payment dates, and puts them on your calendar with lead-time alarms. Every date shows the exact source line it came from, so you can prove where it came from. Track your first document free, forever. Available on the App Store, Google Play, and the Microsoft Store. Details at trailblazer.us.com/tracker.
Closing
What Counts is produced by TrailBlazer Consulting, LLC and hosted by Lee Karas and Maura Dunn. Learn more or reach out directly at info@trailblazer.us.com. Explore compliance-ready corporate training programs at the TrailBlazer Learning Academy. Read more from Maura at Maura’s Substack. Music by Jason Blake. Full disclaimer.