Information risk and readiness checklist.
A practical starting point.

Review checklist

Work through the checklist.

Use the checkboxes during a review. Entries stay in this browser tab and are not submitted to a server. Print or save the completed page for your own records.

• List your document repositories, shared drives, SharePoint sites and paper stores.
• Name a business owner for each important information set.
• Identify the documents needed for critical operational decisions.
• Record where staff cannot find the latest version.
• Review who can access sensitive information and external sharing.
• Identify duplicate, outdated and ownerless content for review.
• Record retention requirements and any legal holds with the responsible owner.
• Sample metadata and document classifications for consistency.
• Check whether a pilot can use an approved, representative dataset.
• Choose one business problem and a measurable baseline.
• Assign a technical reviewer and a business sponsor.
• Agree a scoped next step and an accountable owner.

Action worksheet

Record the next step.

Useful output: A repository inventory, a short list of practical risks and one prioritised pilot.

This worksheet supports planning. Retention, access and disposal decisions require the organisation’s responsible owners and applicable policy review.