Yesterday I was presenting the Governance topic at the first official SharePoint 2010 Microsoft Certified Master rotation. Governance is an important part of any SharePoint deployment, and covers key topics like roles & responsibilities, processes, and policies. One of the discussions that ensued during class was how enforcement of governance policies in a SharePoint deployment can be broken down into the following:
- Things that users can and cannot do. These items are enforced via technology. For example, a company might impose a site collection quota or file upload restriction.
- Things that users may and may not do. These items are described within processes & policy. For example, a company might have a policy that customer information must not be stored within a SharePoint list unless it’s secured properly.
- Things that users should and should not do. These items are described within a set of guidance. For example, a company might recommend that documents should be shared via document workspaces and not emailed as attachments.
If you’re using SharePoint and haven’t given much thought to these kinds of policy statements and how they are enforced, now’s a good time to start.