Taking place over a number of dates in early 2027, these training courses support Scotland's information governance community. The Information Governance Training Academy delivers high-quality professional development for practitioners across Scotland's public, private and third sectors.
Our courses combine current legislation, best practice, and practical experience to equip delegates with the knowledge and skills needed to manage information confidently, responsibly and effectively. They combine Scottish legal and regulatory requirements with practical guidance and discussion of the challenges Scottish organisations face in applying information governance in practice. Real-world examples are woven through each training course.
All our courses provide practical, specialist training specificially for organisations working within Scotland's information governance environment and are delivered with a practical understanding of the balance between risk and available resources.
Attendance at these training courses is limited to 30 delegates.
Delegates will receive a comprehensive course handbook before each training course, providing a useful reference guide to support learning during the course and afterwards
Professional development and training records
The training courses provide structured professional development, and organisations can determine how participation in the training should be recorded within their own professional development and training programmes. Delegates will receive a certificate of completion for their training records.
This training provides an accessible introduction for non information governance specialists to the key business drivers for information governance, including legal and regulatory compliance, organisational accountability, risk management, service delivery, transparency, cyber security, records management and responsible information sharing. How do those drivers affect organisational decisions and why does effective information governance matter?
Click here to find out more and book your place.
This training helps delegates design and maintain effective records management arrangements across paper, email, shared drives, line-of-business systems and Microsoft 365. It covers retention, classification, metadata, disposal, preservation, access and information lifecycle management, enabling organisations to move beyond policy statements to practical controls, clear responsibilities and defensible decisions about what to keep, where to keep it and when to dispose of it.
Click here to find out more and book your place.
This training focuses on applying data protection law in busy operational environments, covering lawful bases, transparency, data minimisation, special category data, information sharing, DPIAs, breaches and rights requests. It will help delegates identify and manage everyday data protection risks, know when to seek advice or escalate issues, and build confidence in balancing compliance with practical business needs, particularly when handling sensitive, multi-agency or complex information.
Click here to find out more and book your place.
This training provides a clear process for managing and responding to subject access requests under UK GDPR and the Data Protection Act 2018, covering search planning, information retrieval, third-party information, redaction, exemptions and complex disclosures. It will help delegates manage SARs confidently and document decisions effectively, particularly where records are sensitive, dispersed across systems, or mixed with other people’s information.
Click here to find out more and book your place.
This training provides a grounding in the Freedom of Information (Scotland) Act 2002, covering how requests should be recognised, logged, assessed and answered, as well as exemptions, public interest tests, timescales, vexatious or repeated requests and reviews. Delegates will also understand how FOISA interacts with the Environmental Information Regulations, data protection and records management, helping them provide lawful, consistent and defensible responses.
Click here to find out more and book your place.
This training explores how governance, compliance, records management, security and information architecture controls can be applied within Microsoft 365 to meet legal and regulatory obligations. Delegates will gain a clearer understanding of ownership, permissions, Teams and SharePoint structures, retention, sensitivity, auditability, external sharing and user behaviour risks, helping organisations move from unmanaged use of Microsoft 365 towards a structured governance model with clear roles, policies and controls.
Click here to find out more and book your place.
This training will provide a practical deep dive for practitioners who are responsible for developing, implementing or managing the delivery of an effective information governance framework, including policy, process, people, roles, accountability, assurance and continuous improvement. It will look at how to assess organisational needs, map information assets and translate legal, regulatory and business requirements into proportionate governance arrangements and also examine how to design, coordinate and embed joined-up governance arrangements across services, systems and teams, and to oversee others involved in delivering those arrangements.
Click here to find out more and book your place.
This training provides an accessible overview of AI, generative AI and Microsoft Copilot, exploring their capabilities, opportunities and governance risks. Delegates will consider the information governance, security, records management, transparency, procurement and assurance issues that should be addressed before adoption, enabling senior leaders and governance teams to assess readiness, risk, policy, training needs and organisational controls with greater confidence.
Click here to find out more and book your place.
Director
RiSiO Solutions Ltd
Rachel Mitchell is an award-winning information governance specialist based in Dundee with over 25 years’ practical experience across data protection, records management and Microsoft 365 governance in all sectors.
Rachel Mitchell
Director
RiSiO Solutions Ltd
Rachel Mitchell is an experienced information governance professional with over 20 years' experience helping organisations manage information effectively, meet regulatory obligations and improve transparency, accountability and decision-making.
As Director of RiSiO Solutions Ltd, Rachel works with public, private and third sector organisations across Scotland and the UK, providing specialist advice on information governance, records management, data protection, freedom of information and Microsoft 365 governance. Her clients include local authorities, NHS bodies, charities, care providers, research organisations and national public bodies.
Rachel is recognised for her practical and proportionate approach, helping organisations translate complex regulatory and governance requirements into solutions that support operational delivery. She has extensive experience leading governance reviews, developing information management frameworks, improving records management maturity, and supporting organisations through digital transformation and change.
A respected trainer and conference speaker, Rachel is known for delivering engaging, practical learning based on real-world experience. Her focus is on helping delegates build confidence, understand risks and obligations, and apply good information governance practices in their day-to-day roles.
Rachel holds an MSc in Information and Records Management and is an Associate Member of the Information and Records Management Society (IRMS), where she also serves on the IRMS Scotland Committee.
Rachel Mitchell is an award-winning information governance specialist based in Dundee with over 25 years’ practical experience across data protection, records management and Microsoft 365 governance in all sectors.
In partnership with: RiSiO Solutions
RiSiO Solutions Ltd is a Scotland-based information governance consultancy specialising in records management, data protection, freedom of information, Microsoft 365 governance, and information and data strategy.
Working across the public, private and third sectors, RiSiO helps organisations develop practical, proportionate approaches to managing information, meeting compliance obligations, and supporting effective decision-making.
Known for its engaging and pragmatic training style, RiSiO delivers learning that translates governance principles into real-world practice.
Book delegate places or purchase video recording.
