Supporting Scotland's information governance community, the Information Governance Academy delivers high-quality professional development for practitioners across Scotland's public, private and third sectors.
Our courses combine current legislation, best practice, and practical experience to equip delegates with the knowledge and skills needed to manage information confidently, responsibly and effectively. They combine Scottish legal and regulatory requirements with practical guidance and discussion of the challenges Scottish organisations face in applying information governance in practice. Real-world examples are woven through each course.
All our courses provide practical, specialist training specificially for organisations working within Scotland's information governance environment and are delivered with a practical understanding of the balance between risk and available resources.
This training provides an accessible introduction for non information governance specialists to the key business drivers for information governance, including legal and regulatory compliance, organisational accountability, risk management, service delivery, transparency, cyber security, records management and responsible information sharing. How do those drivers affect organisational decisions and why does effective information governance matter?
Click here to find out more and book your place.
This training helps delegates design and maintain effective records management arrangements across paper, email, shared drives, line-of-business systems and Microsoft 365. It covers retention, classification, metadata, disposal, preservation, access and information lifecycle management, enabling organisations to move beyond policy statements to practical controls, clear responsibilities and defensible decisions about what to keep, where to keep it and when to dispose of it.
Click here to find out more and book your place.
This training focuses on applying data protection law in busy operational services, covering lawful bases, transparency, data minimisation, special category data, information sharing, DPIAs, breaches and rights requests. It will help delegates identify and manage everyday data protection risks, know when to seek advice or escalate issues, and build confidence in balancing compliance with practical business needs, particularly when handling sensitive, multi-agency or complex information.
Click here to find out more and book your place.
This training provides a clear process for managing and responding to subject access requests under UK GDPR and the Data Protection Act 2018, covering search planning, information retrieval, third-party information, redaction, exemptions and complex disclosures. It will help delegates manage SARs confidently and document decisions effectively, particularly where records are sensitive, dispersed across systems, or mixed with other people’s information.
Click here to find out more and book your place.
This training provides a grounding in the Freedom of Information (Scotland) Act 2002, covering how requests should be recognised, logged, assessed and answered, as well as exemptions, public interest tests, timescales, vexatious or repeated requests and reviews. Delegates will also understand how FOISA interacts with the Environmental Information Regulations, data protection and records management, helping them provide lawful, consistent and defensible responses.
Click here to find out more and book your place.
This training explores how governance, compliance, records management, security and information architecture controls can be applied within Microsoft 365 to meet legal and regulatory obligations. Delegates will gain a clearer understanding of ownership, permissions, Teams and SharePoint structures, retention, sensitivity, auditability, external sharing and user behaviour risks, helping organisations move from unmanaged use of Microsoft 365 towards a structured governance model with clear roles, policies and controls.
Click here to find out more and book your place.
This training will provide a practical deep dive for practitioners who are responsible for developing, implementing or managing the delivery of an effective information governance framework, including policy, process, people, roles, accountability, assurance and continuous improvement. It will look at how to assess organisational needs, map information assets and translate legal, regulatory and business requirements into proportionate governance arrangements and also examine how to design, coordinate and embed joined-up governance arrangements across services, systems and teams, and to oversee others involved in delivering those arrangements.
Click here to find out more and book your place.
This training provides an accessible overview of AI, generative AI and Microsoft Copilot, exploring their capabilities, opportunities and governance risks. Delegates will consider the information governance, security, records management, transparency, procurement and assurance issues that should be addressed before adoption, enabling senior leaders and governance teams to assess readiness, risk, policy, training needs and organisational controls with greater confidence.
Click here to find out more and book your place.
In partnership with: RiSiO Solutions
RiSiO Solutions Ltd is a Scotland-based information governance consultancy specialising in records management, data protection, freedom of information, Microsoft 365 governance, and information and data strategy.
Working across the public, private and third sectors, RiSiO helps organisations develop practical, proportionate approaches to managing information, meeting compliance obligations, and supporting effective decision-making.
Known for its engaging and pragmatic training style, RiSiO delivers learning that translates governance principles into real-world practice.
Book delegate places or purchase video recording.
