COMPREHENSIVE LECTURE NOTES

Course: Organisation Information Management (PAD 104)

Module 1: Foundations of Information Management

Module 2: Types, Classification, and Sources of Information

MODULE 1: FOUNDATIONS OF INFORMATION MANAGEMENT

1.1 Understanding Information in Organizations

The Information Age and Public Administration

We live in what is often called the Information Age. Unlike previous eras defined by agriculture
or industry, our contemporary world is defined by the creation, processing, storage, and
dissemination of information. For public administration, this transformation is profound.
Governments that once relied on paper files, manual processes, and face-to-face communication
now operate in hybrid environments where digital and traditional systems coexist. Citizens
expect instant access to government services and information. Decision-makers demand real-
time data to guide policy. Accountability requires transparent documentation of actions and
outcomes.

Yet, despite this transformation, many public organizations struggle with information
management. They are drowning in information but starving for knowledge. They collect vast
amounts of data but cannot find the specific information needed to make a decision. They store
records for decades but cannot retrieve a file from last month. They invest in expensive
technology but fail to change the human and organizational practices that determine whether
technology succeeds or fails.

This course addresses this gap. It equips you, as future public administrators, with the
foundational knowledge and practical skills to manage information as the strategic organizational
asset it truly is.

Defining Data, Information, and Knowledge

To manage information effectively, we must first understand what information is and how it
differs from related concepts. These distinctions are not merely academic; they shape how we
design systems, allocate resources, and train staff.

Data is raw, unprocessed facts, figures, and symbols that have no meaning by themselves. Data
is the starting point. It is discrete, objective, and uninterpreted. Examples of data include the
number 37, the name "Lagos," the date "15/08/2024," and the symbol "₦50,000." Alone, these
data points tell us nothing. They are like individual letters of the alphabet—necessary for
communication but meaningless in isolation.

Information is data that has been processed, organized, structured, or presented in a context that
makes it meaningful and useful. Information answers questions such as who, what, where, when,
and how many. It is data with significance. When we take the data points above and combine
them into the statement "The Ministry processed 37 building permit applications in Lagos on
15/08/2024, generating ₦50,000 in revenue," we have created information. The data has been
given context, structure, and meaning.

Knowledge is information combined with experience, judgment, context, interpretation, and

action. Knowledge answers questions such as why and how. It is information with insight. When
an experienced public administrator looks at the information about permit applications and
concludes, "The new online application system has increased processing volume by 40%
compared to last year, but we need to improve quality control because the error rate has also
risen," she is applying knowledge. She has interpreted the information, placed it in a broader
context, and derived actionable insights.

Understanding this hierarchy is essential for effective information management. Organizations

often focus on collecting data, hoping it will magically become information and knowledge. But
data does not become information without processing. Information does not become knowledge
without interpretation. Each stage requires specific activities, skills, and systems.

Information as a Strategic Organizational Asset

In traditional management thinking, organizations had four primary resources: land, labor,
capital, and entrepreneurship. In the information age, we must add a fifth: information.
Information is not merely a byproduct of organizational activity; it is a strategic asset that, when
managed effectively, creates competitive advantage, enables better decisions, improves service
delivery, and builds public trust.

Consider what happens when information is managed poorly. A citizen applies for a permit but
the application is lost; she must start over, wasting time and money. A policy is developed using
outdated statistics; the policy fails because it addresses problems that no longer exist. A
government agency cannot respond to a Freedom of Information request because no one can find
the relevant records; the agency is sued and its reputation damaged. A disaster response team
lacks accurate maps of vulnerable communities; resources are misallocated and lives are lost.

Consider what happens when information is managed well. A citizen applies online; the system
routes the application to the correct officer, tracks its progress, and sends automatic updates; the
permit is issued in half the previous time. A policymaker accesses a dashboard showing real-time
data on service delivery; she identifies underperforming areas and redirects resources before
problems escalate. A journalist requests information; the agency responds promptly and
completely, building public trust. An emergency team has accurate, up-to-date information on
population distribution and infrastructure; they save lives.
Information management is not a back-office support function. It is a core competency of
effective public administration. The quality of governance depends on the quality of information
management.

The Consequences of Poor Information Management

The consequences of poor information management are not abstract; they are tangible and
severe. Students should understand these consequences because they explain why this course
matters.

Operational consequences include delayed decisions as staff search for missing information;
duplicated work as different units collect the same data independently; wasted resources as
supplies are ordered that already exist but are not catalogued; and frustrated staff who waste time
on manual processes that technology could automate.

Legal consequences include failure to produce records in response to FOI requests or court
orders; inability to defend against legal claims because evidence cannot be located; non-
compliance with data protection regulations; and destruction of records before their legal
retention period expires.

Financial consequences include unnecessary storage costs for records that should have been
destroyed; lost productivity as staff spend hours searching for information; penalties for
regulatory non-compliance; and the cost of recreating information that was lost.

Reputational consequences include negative media coverage of information failures; loss of

public trust when government cannot account for its actions; damage to employee morale; and
erosion of stakeholder confidence.

Public administrators who understand these consequences make information management a

priority, not an afterthought.

1.2 Defining Information Management

What is Information Management?

Information management is the systematic process of collecting, organizing, storing, retrieving,

protecting, preserving, and disposing of information in a manner that supports organizational
objectives, meets legal and regulatory requirements, and serves stakeholder needs.

Let us unpack this definition.

Systematic process means information management is not ad hoc or accidental. It follows

established policies, procedures, and standards. It is intentional, not random. It is consistent
across the organization, not dependent on individual preferences.
Collecting, organizing, storing, retrieving, protecting, preserving, and disposing are the
specific activities that constitute information management. We will examine each in detail as we
study the information lifecycle.

Supports organizational objectives means information management serves the mission of the
organization. It is not an end in itself but a means to achieving goals. A school manages
information to educate students. A health ministry manages information to improve health
outcomes. A revenue agency manages information to collect taxes fairly and efficiently.

Meets legal and regulatory requirements means information management is not optional.
Laws require certain records to be created, retained, and disclosed. Regulations prescribe how
certain information must be protected. Compliance is mandatory.

Serves stakeholder needs means information management considers the users of information—
citizens, staff, managers, policymakers, auditors, researchers, journalists. Information is not
managed for its own sake but for the people who need it.

The Scope of Information Management

Information management encompasses all information regardless of format or source. This is a

critical point.

By format, information management covers paper records (files, folders, documents, forms),
electronic records (emails, word processing files, spreadsheets, databases, PDFs), audio and
visual records (recordings, photographs, videos), and microforms (microfilm, microfiche). Many
organizations make the mistake of focusing on one format while neglecting others. A ministry
may invest heavily in electronic document management while its paper files decay in
unorganized storage rooms. A local government may organize its paper files while its emails are
a chaotic mess. Effective information management integrates all formats.

By source, information management covers internal information (created within the

organization) and external information (received from outside). Internal information includes
memos, reports, minutes, policies, and correspondence. External information includes laws,
regulations, statistics, research, and citizen communications. Organizations that focus only on
internal information miss critical context. Organizations that neglect internal information cannot
manage their own operations.

By function, information management covers administrative information (personnel, finance,

procurement), programmatic information (service delivery, case management, project
monitoring), and policy information (analysis, evaluation, planning). Each type has different
characteristics, users, and requirements.

Distinguishing Information Management from Related Concepts

Information management is often confused with related concepts. Understanding the distinctions
is important because each concept implies different activities, skills, and systems.
Data management focuses on structured data in databases and information systems. It
emphasizes data quality, data integration, data warehousing, and data analytics. Data
management professionals work with relational databases, SQL queries, and business
intelligence tools. Information management is broader, encompassing unstructured information
(emails, documents) as well as structured data.

Records management focuses on official records that provide evidence of organizational

activities and have legal, fiscal, or historical value. Records management emphasizes retention
schedules, disposal authorities, and archival preservation. Information management is broader,
encompassing information that is not formally designated as a record—draft documents,
reference materials, personal notes.

Knowledge management focuses on tacit knowledge—the expertise, experience, and insight

held by individuals—and its sharing across the organization. Knowledge management
emphasizes communities of practice, lessons learned systems, and knowledge transfer.
Information management focuses on explicit information that can be documented and stored.

In practice, these concepts overlap. An effective organization integrates data management,

records management, knowledge management, and information management into a coherent
whole. But the distinctions help us understand which tools and techniques are appropriate for
which purposes.

1.3 The Information Lifecycle

Introduction to the Lifecycle Concept

The information lifecycle is a foundational concept in information management. It describes the

stages through which information passes from creation or receipt to final disposition.
Understanding the lifecycle is essential because different stages require different policies,
procedures, resources, and competencies.

The lifecycle is often depicted as a circle or a cycle because the end of one information item's life
(disposal) connects to the beginning of another's (creation). Information is constantly flowing
through organizations, and the lifecycle framework helps us manage this flow systematically.

The lifecycle has six stages: creation or receipt, storage, retrieval, use and dissemination,
archiving, and disposal. We will examine each stage in detail.

Stage One: Creation or Receipt

The lifecycle begins when information enters the organization. Information may be created
internally or received externally.
Internal creation occurs when organizational staff produce information as part of their work.
Examples include a policy analyst drafting a report, a secretary typing meeting minutes, a
finance officer preparing a budget spreadsheet, a manager writing a memo to staff, and a
customer service officer recording a citizen's complaint. Internal creation is typically within the
organization's control; staff can be trained in proper practices, and templates can be provided to
ensure consistency.

External receipt occurs when information arrives from outside the organization. Examples
include a letter from a citizen, an email from another agency, a regulation from a ministry, a
statistical report from the national bureau, and a research paper from an academic institution.
External receipt is less within the organization's control; the organization must respond to the
format, quality, and timeliness of incoming information.

The manner of creation or receipt has profound implications for subsequent lifecycle stages.
Information created electronically can be stored in digital systems and retrieved instantly.
Information received on paper must be scanned or manually processed. Information created
without consistent naming conventions or metadata will be difficult to retrieve. Information
received without a clear registration process may be lost entirely.

Best practices for this stage include establishing clear procedures for creating and receiving
information; using templates and standards to ensure consistency; registering incoming
information in a log or tracking system; and applying initial classification at the point of creation
or receipt.

Stage Two: Storage

Storage is the placement of information in a suitable medium and location for safekeeping and
future access. Storage decisions have long-term consequences; information that is poorly stored
may be lost, damaged, or inaccessible.

Storage media refers to the physical or electronic carrier of information. For paper records,
common media include file folders, binders, boxes, and filing cabinets. For electronic records,
common media include hard drives, solid-state drives, magnetic tape, optical discs (CDs, DVDs),
and cloud storage. Each medium has advantages and disadvantages in terms of cost, durability,
capacity, and accessibility.

Storage location refers to where the storage media is kept. On-site storage offers immediate
access but consumes valuable office space and may be vulnerable to theft, fire, or flood. Off-site
storage frees office space and may offer better security but introduces delays in retrieval.
Commercial records centers specialize in off-site storage with climate control, security, and
retrieval services. Electronic storage may be on the organization's own servers (on-premise) or
on cloud servers owned by third parties.

Active vs. inactive storage distinguishes information based on frequency of access. Active
information is accessed regularly and should be stored in convenient, accessible locations.
Inactive information is accessed rarely and can be stored in less convenient, lower-cost locations.
Many organizations fail to distinguish between active and inactive information, leading to
crowded filing cabinets and slow retrieval as active and inactive records are intermingled.

Storage conditions affect the longevity of information. Paper records require protection from
light, heat, humidity, dust, pests, and pollutants. Electronic records require protection from
magnetic fields, temperature extremes, and physical shock. Both require protection from
unauthorized access. Many organizations store valuable records in basements, attics, or storage
closets where conditions are poor; this is false economy, as records that cannot be retrieved or
are damaged are worthless.

Stage Three: Retrieval

Retrieval is the process of locating and accessing stored information when needed. Retrieval
effectiveness determines whether the investment in storage yields any return. Information that
cannot be retrieved is worthless, regardless of how carefully it was created or stored.

Retrieval time is the elapsed time between a request for information and its delivery. In a well-
designed system, retrieval takes seconds or minutes. In a poorly designed system, retrieval may
take hours, days, or may never succeed. The appropriate retrieval time depends on the urgency of
the need. A citizen waiting at a service counter needs information immediately. A researcher
studying historical trends can wait days or weeks.

Retrieval methods vary by system. In a paper filing system, retrieval involves locating the
correct file drawer, folder, and document. In an electronic system, retrieval involves searching by
keywords, metadata, or full-text content. In a database, retrieval involves querying using
structured query language. The method must match the system and the user's skills.

Factors affecting retrieval include the quality of classification and indexing, the consistency of
filing practices, the availability of finding aids, the training of retrieval staff, and the condition of
the storage media. A single point of failure in any of these factors can make retrieval impossible.

Best practices for retrieval include developing and maintaining finding aids (indexes, catalogs,
databases); training all staff who need to retrieve information; conducting regular retrieval tests
to identify problems; and continuously improving classification and indexing based on retrieval
experiences.

Stage Four: Use and Dissemination

Use is the application of information to organizational activities: decision-making, planning,

service delivery, reporting, analysis, and communication. Dissemination is the distribution of
information to authorized recipients.

Internal use occurs within the organization. A manager reads a report to decide on budget
allocations. A policy analyst studies data to evaluate program effectiveness. A customer service
officer accesses a case file to respond to a citizen inquiry. Internal use is the primary purpose of
most information management; information is created and stored so that organizational staff can
use it.

External dissemination occurs when information is shared outside the organization. Examples
include responding to a Freedom of Information request, publishing a public report, sharing data
with partner agencies, and communicating with the media. External dissemination raises
additional considerations: legal requirements (what must be disclosed), privacy protections (what
cannot be disclosed), security (what must be protected), and presentation (how to communicate
clearly to external audiences).

The principle of right information to the right person at the right time guides use and
dissemination. Information that reaches the wrong person is a security breach. Information that
reaches the right person too late is useless. Information that is incomplete or inaccurate is worse
than no information because it leads to wrong decisions.

Best practices for use and dissemination include establishing clear authorization for who may
access which information; providing training on how to interpret and apply information;
designing dissemination products for their intended audiences; and tracking dissemination to
ensure completeness and timeliness.

Stage Five: Archiving

Archiving is the transfer of information with long-term or permanent value to a secure storage
environment for preservation and future reference. Archives preserve organizational memory,
provide evidence of decisions and actions, and serve historical, legal, and research purposes.

What is archived? Not all information is archived. Most information is temporary, useful for a
limited period, and then destroyed. Archiving is reserved for information with enduring value.
Criteria for archiving include legal requirements (records that must be kept permanently by law),
fiscal requirements (records documenting financial transactions and audits), historical value
(records documenting important decisions, events, or people), and research value (data that may
be useful for future analysis).

Archival storage differs from active storage. Archives require climate control (stable
temperature and humidity), protection from light and pollutants, secure access controls, and
disaster protection (fire suppression, flood prevention). Archives also require preservation
activities such as reformatting deteriorating media, repairing damaged records, and migrating
electronic records to new formats as technology changes.

Archival description is the process of creating finding aids that describe the contents of
archives. Unlike active records, which may be retrieved by individual document, archives are
typically described at the collection level—what records are in the collection, who created them,
when, and what they document. Researchers then request specific boxes or files for review.

Access to archives may be more restricted than access to active records. Some archives are
closed for a period to protect privacy or confidentiality. Others are open to researchers,
journalists, and the public. The archivist must balance preservation (protecting records from
damage) with access (making records available to users).

Stage Six: Disposal

Disposal is the secure destruction of information that no longer has administrative, legal, fiscal,
or historical value. Disposal is as important as any other lifecycle stage because retaining
information beyond its useful life imposes costs and risks without benefits.

Why dispose? There are compelling reasons to dispose of information that no longer needs to be
kept. Storage costs—physical space, equipment, staff time—are not trivial. Legal risks increase
with every record retained; records that should have been destroyed can be subpoenaed or
discovered in litigation. Confidentiality risks also increase; the longer information is kept, the
more opportunities for unauthorized access. Organizational efficiency suffers when staff must
search through obsolete records to find current information.

Authorized disposal requires formal authorization. Staff cannot decide on their own to destroy
records. Most organizations have retention schedules that specify how long each type of record
must be kept and when it may be destroyed. Retention schedules are based on legal
requirements, operational needs, and archival value. Destruction without authorization is a
serious offense that can result in legal sanctions and disciplinary action.

Secure destruction methods ensure that disposed information cannot be recovered. For paper
records, secure destruction includes cross-cut shredding, pulping, or incineration. For electronic
records, secure destruction includes overwriting (writing random data over the file multiple
times), degaussing (exposing magnetic media to strong magnetic fields), or physical destruction
(shredding, crushing, or incinerating the storage device). Simple deletion is not secure; deleted
files can often be recovered with readily available software.

Documentation of disposal is essential. The organization must record what was destroyed,
when, by whom, under what authority, and using what method. This documentation protects the
organization in case of future inquiries about missing records.

The Interconnectedness of the Lifecycle

The six stages of the information lifecycle are not sequential in a simple sense; they are
interconnected, and decisions at one stage affect all others.

Information created without a clear classification will be difficult to store properly. Information
stored without adequate indexing will be impossible to retrieve. Information retrieved but not
used is wasted effort. Information disseminated to the wrong person creates security risks.
Information that should be archived but is destroyed loses organizational memory. Information
that should be destroyed but is retained imposes unnecessary costs and risks.
Effective information management requires viewing the lifecycle holistically. Organizations
must develop policies, procedures, and systems that support all stages, not just the most visible
or most urgent.

MODULE 2: TYPES, CLASSIFICATION, AND SOURCES OF INFORMATION

2.1 Types of Information by Structure

Understanding Information Structure

Information structure refers to the degree to which information is organized in a predictable,

machine-readable format. Structure affects how information can be stored, searched, retrieved,
and analyzed. Understanding structure is essential because different types of structure require
different management approaches.

Structured Information

Structured information is highly organized and follows a predefined format. It is designed for
easy processing by computers. Structured information is typically stored in databases,
spreadsheets, or forms.

Characteristics of structured information include predefined fields that specify the type of
data each field can contain; consistent format where every record follows the same structure;
machine-readability where computers can process the information without human interpretation;
and efficient querying where specific information can be retrieved using structured query
languages.

Examples of structured information in public administration include payroll records with

fields for employee name, employee ID, salary, deductions, and net pay; student registration data
with fields for student name, date of birth, class, and parent contact; inventory databases with
fields for item name, quantity, location, and reorder point; financial transactions with fields for
date, amount, vendor, and account code; and permit applications with fields for applicant name,
property address, permit type, and fee paid.

Advantages of structured information include efficient storage (data occupies minimal space),
rapid retrieval (queries return results in milliseconds), easy analysis (statistical and analytical
tools work directly with structured data), and consistency (validation rules prevent incorrect data
entry).

Limitations of structured information include inflexibility (adding new fields requires

database redesign), inability to capture nuance (complex information must be forced into
predefined categories), and poor handling of text (free-form comments, narratives, and
descriptions do not fit neatly into fields).

Unstructured Information

Unstructured information lacks a predefined format and is not easily processed by computers
without advanced techniques such as natural language processing. Unstructured information is
the most common form of information in most organizations.

Characteristics of unstructured information include variable format where each document

may have a different structure; human readability where the information is designed for people,
not computers; difficulty of automated processing without specialized tools; and richness of
content where nuance, context, and meaning are preserved.

Examples of unstructured information in public administration include email messages with

varying headers, signatures, attachments, and threading; word processing documents such as
reports, memos, policies, and correspondence; PDF documents that may be text-searchable or
scanned images; meeting minutes with free-form notes on discussions and decisions; handwritten
notes from field visits or interviews; and social media posts, comments, and messages.

Advantages of unstructured information include flexibility (any content can be captured

without predefined structure), richness (nuance, context, and meaning are preserved), and
familiarity (staff are comfortable creating and reading documents).

Limitations of unstructured information include inefficient storage (documents consume more

space than structured data), difficult retrieval (finding specific information requires reading or
searching documents), limited analysis (automated analysis requires specialized natural language
processing), and inconsistency (similar information may be recorded differently by different
staff).

Semi-Structured Information

Semi-structured information contains some organizational elements but not the full rigidity of
structured information. It falls between structured and unstructured on the structure continuum.

Characteristics of semi-structured information include partial structure where some elements

are consistently present and formatted; variable content where other elements vary; metadata that
describes the information without fully structuring it; and flexibility that allows evolution over
time.

Examples of semi-structured information include XML (Extensible Markup Language)

documents that use tags to identify elements but allow flexible nesting; JSON (JavaScript Object
Notation) data that organizes information in key-value pairs with arrays and nested objects;
email with standard headers (From, To, Date, Subject) but variable body content; web forms
where some fields are required and others optional; and log files that follow a standard format
but contain variable event descriptions.
Advantages of semi-structured information include balance between structure and flexibility;
support for self-describing data where the structure is embedded in the information; and easier
processing than fully unstructured information.

Implications for Information Management

The structure of information determines appropriate management strategies. Organizations that

treat all information as structured will struggle with unstructured content. Organizations that treat
all information as unstructured will miss opportunities for automation and analysis.

For structured information, management focuses on database design, data quality, query
optimization, and backup and recovery. Structured information is best managed by database
management systems (DBMS) such as Microsoft SQL Server, Oracle, MySQL, or PostgreSQL.

For unstructured information, management focuses on document management, version

control, access control, and retention scheduling. Unstructured information is best managed by
document management systems (DMS) such as Microsoft SharePoint, OpenText, or Alfresco.

For semi-structured information, management focuses on metadata extraction, schema

evolution, and integration between structured and unstructured systems.

Most organizations need all three capabilities. A citizen record may be structured (name, address,
ID number), include semi-structured metadata (application date, status code), and attach
unstructured documents (supporting letters, photographs). An integrated information
management system handles all three.

2.2 Types of Information by Source

Internal Information

Internal information is generated within the organization as part of its normal operations. It
reflects the organization's activities, decisions, transactions, and performance.

Characteristics of internal information include organizational control where the organization

determines what is created, how it is formatted, and where it is stored; relevance where internal
information directly relates to the organization's mission and operations; accessibility where
internal information is typically easier to access than external information; and confidentiality
where some internal information is sensitive and must be protected.

Examples of internal information in public administration include operational data such as

service delivery statistics, case files, transaction logs, and workload measures; financial data
such as budgets, expenditures, receipts, payroll, and procurement records; personnel records such
as employee files, attendance records, performance evaluations, and training records; planning
documents such as strategic plans, work plans, project proposals, and meeting minutes; and
communications such as internal memos, emails, reports, and presentations.

Management considerations for internal information include establishing clear policies for
creation, storage, and retention; training staff on consistent practices; ensuring security and
access controls; and integrating internal information across departments to avoid silos.

External Information

External information originates outside the organization. It provides context, benchmarks, legal
requirements, and stakeholder input that internal information alone cannot supply.

Characteristics of external information include lack of organizational control where the

organization cannot determine format, quality, or timeliness; variable quality where external
sources range from authoritative to unreliable; need for evaluation where external information
must be assessed for credibility and relevance; and integration challenges where external
information must be combined with internal information for decision-making.

Examples of external information in public administration include legal and regulatory

information such as laws, regulations, court decisions, and official gazettes; statistical and
research information such as census data, economic indicators, health statistics, and academic
studies; stakeholder input such as citizen feedback, complaints, suggestions, and survey
responses; intergovernmental information such as communications from other agencies,
ministries, or international bodies; and media and public information such as news reports, social
media, and public announcements.

Management considerations for external information include systematic collection from

reliable sources; evaluation of credibility, relevance, and timeliness; organization for easy
retrieval when needed; integration with internal information for analysis; and sharing across the
organization so that all who need the information can access it.

The Critical Importance of Both Sources

Organizations that focus only on internal information suffer from tunnel vision. They know their
own operations but lack context about the environment in which they operate. They may develop
policies based on outdated assumptions about external conditions. They may miss legal
requirements because they did not track regulatory changes. They may be surprised by
stakeholder reactions because they did not monitor public sentiment.

Organizations that focus only on external information suffer from lack of grounding. They may
be well-informed about the world but unable to connect that knowledge to their own operations.
They may adopt best practices from elsewhere without understanding whether those practices fit
their context. They may respond to external pressures without a clear picture of their own
capacity and constraints.
Effective information management requires systematic attention to both internal and external
sources. The organization must create and capture internal information, and it must actively seek
and organize external information. Decision-making integrates both.

2.3 Types of Information by Organizational Level

The Three Levels of Management

Organizations have three levels of management: top management (strategic), middle

management (tactical), and frontline supervision (operational). Each level has different
information needs, and information systems must serve all three.

Strategic Information

Strategic information is used by top management—directors, commissioners, permanent

secretaries, agency heads—for long-term planning, policy formulation, organizational direction,
and resource allocation.

Characteristics of strategic information include external focus where the organization's

environment is as important as internal operations; long time horizon where planning spans years
or decades; aggregated detail where summaries and trends matter more than individual
transactions; forward-looking orientation where prediction and scenario analysis are valued; and
high uncertainty where strategic decisions are made with incomplete information.

Examples of strategic information include demographic trends such as population growth, age
distribution, migration patterns, and urbanization; economic forecasts such as GDP growth,
employment projections, inflation trends, and investment patterns; technological developments
such as emerging technologies, adoption rates, and implications for service delivery; political
and regulatory environment such as policy directions, legislative priorities, and international
agreements; social and cultural trends such as changing citizen expectations, values, and
behaviors; and competitor and partner intelligence such as activities of other governments,
NGOs, and private sector providers.

Management of strategic information typically involves dedicated scanning and analysis

functions. Staff may be assigned to monitor specific external domains. Information may be
synthesized in briefing papers, situation reports, and presentations. Strategic information is often
less structured and more interpretive than operational information.

Tactical Information

Tactical information is used by middle management—department heads, division chiefs,

program managers—for departmental planning, resource allocation, performance monitoring,
and coordination.
Characteristics of tactical information include balance between internal and external focus;
medium time horizon where planning spans months or quarters; moderate detail where
departmental aggregates and trends are relevant; comparison orientation where actual
performance is compared to targets, budgets, and benchmarks; and action orientation where
information supports specific decisions and interventions.

Examples of tactical information include departmental budgets such as allocations,

expenditures, variances, and forecasts; program performance such as output measures, outcome
indicators, efficiency ratios, and quality metrics; workload and capacity such as staffing levels,
caseloads, processing times, and backlogs; stakeholder feedback such as satisfaction surveys,
complaints, and suggestions aggregated by department; resource availability such as supplies,
equipment, facilities, and technology; and interdepartmental coordination such as shared
activities, dependencies, and handoffs.

Management of tactical information typically involves regular reports, dashboards, and

meetings. Information may be extracted from operational systems and aggregated. Middle
managers need tools to drill down from summaries to detail when problems are identified.

Operational Information

Operational information is used by frontline supervisors and staff—team leaders, case workers,
service counter staff—for day-to-day activities, transactions, and service delivery.

Characteristics of operational information include internal focus where the organization's own
operations are paramount; short time horizon where information is needed in real time or near
real time; high detail where individual transactions, cases, and events matter; precision where
accuracy is essential for correct action; and transaction orientation where information supports
specific workflows and processes.

Examples of operational information include individual case files such as applications,

requests, complaints, and service records; transaction logs such as permits issued, payments
received, referrals made, and services provided; schedules and assignments such as staff rotas,
task lists, and duty allocations; inventory status such as stock levels, reorder points, and supply
locations; client information such as names, addresses, contact details, and history; and
procedural guidance such as checklists, forms, templates, and standard operating procedures.

Management of operational information typically involves transaction processing systems,

case management systems, and workflow tools. Information must be captured accurately at the
point of service delivery. Systems must support rapid retrieval and update. Data quality is critical
because operational errors propagate through the organization.

The Hierarchy of Information Needs

Strategic, tactical, and operational information are not independent; they form a hierarchy.
Operational information feeds into tactical summaries. Tactical summaries feed into strategic
analysis. Conversely, strategic decisions set the context for tactical planning, which guides
operational activities.

A common failure in information management is designing systems that serve only one level. A
system that captures operational data perfectly but cannot produce tactical summaries is of
limited use to middle managers. A dashboard that provides strategic indicators but cannot drill
down to operational detail is of limited use for problem diagnosis. Effective information
management serves all levels with appropriate detail, timeliness, and presentation.

2.4 Classification by Sensitivity and Access

The Principle of Least Privilege

The principle of least privilege states that individuals should have access only to the information
necessary for their legitimate work. This principle balances the need for information access
against the risks of unauthorized disclosure, misuse, or damage.

Classification by sensitivity is the process of assigning information to categories that determine

who may access it, under what conditions, and with what protections. Classification enables the
principle of least privilege by providing a common language for discussing access requirements.

Public Information

Public information may be disclosed to anyone without restriction. It is the most accessible
classification.

Characteristics of public information includes no legal restrictions on access; no expectation

of privacy; suitability for publication on websites, in reports, or through other public channels;
and proactive disclosure as a transparency and accountability measure.

Examples of public information in public administration include published reports such as

annual reports, strategic plans, and program evaluations; budget documents such as approved
budgets, financial statements, and procurement notices; service information such as office
locations, hours, fees, and application procedures; public notices such as hearings, meetings, and
comment periods; and statistical summaries such as aggregate data without personal identifiers.

Management considerations for public information include proactive disclosure to avoid FOI
requests; quality assurance to ensure accuracy before publication; accessibility to ensure
information is usable by citizens with disabilities; and version control to ensure the public sees
current information.

Restricted Information
Restricted information is available only to authorized personnel within the organization.
Unauthorized disclosure may cause inconvenience but not serious harm.

Characteristics of restricted information includes internal use only where external disclosure
is not prohibited by law but is not encouraged; limited distribution where access is limited to
staff with a legitimate need; and operational sensitivity where disclosure could cause confusion,
inefficiency, or minor embarrassment.

Examples of restricted information in public administration include internal memos and

communications not intended for public release; draft policies and documents that are not yet
final; preliminary analyses that have not been validated; internal performance data not yet
published; and operational plans that do not affect public safety.

Management considerations for restricted information include clear marking to indicate

restricted status; access controls to limit distribution; and training to ensure staff understand
handling requirements.

Confidential Information

Confidential information is highly sensitive and available only to specific individuals with a
legitimate need to know. Unauthorized disclosure could cause significant harm to individuals or
the organization.

Characteristics of confidential information includes legal protections where laws may

specifically protect certain categories of information; privacy interests where individuals have a
reasonable expectation that the information will not be disclosed; and potential harm where
disclosure could damage reputations, finances, safety, or security.

Examples of confidential information in public administration include personnel records such

as employee files, disciplinary actions, medical information, and performance evaluations;
personal information about citizens such as health records, tax returns, social welfare files, and
juvenile records; security information such as facility plans, security procedures, and
vulnerability assessments; legal information such as attorney-client communications and
privileged documents; and investigative information such as pending enforcement actions and
confidential sources.

Management considerations for confidential information include strict access controls, often
logged and audited; secure storage, physically or electronically protected; limited copying and
transmission; confidentiality training for all who handle such information; and breach
notification procedures in case of unauthorized disclosure.

Classified Information

Classified information relates to national security and is protected by specific legal frameworks.
Unauthorized disclosure could cause exceptionally grave damage to national security.
Characteristics of classified information includes legal basis in national security laws and
executive orders; government-wide standards that apply across agencies; formal classification
levels (confidential, secret, top secret) with specific definitions and handling requirements; and
criminal penalties for unauthorized disclosure.

Examples of classified information include intelligence sources and methods; military plans
and capabilities; diplomatic communications; nuclear weapons information; and certain law
enforcement and counterterrorism information.

Management considerations for classified information are beyond the scope of this
introductory course, but public administrators should be aware that such information exists and
has its own stringent management requirements.

Over-Classification and Under-Classification

Both over-classification and under-classification are problems. Over-classification occurs when

information is classified more restrictively than necessary. It undermines transparency, impedes
legitimate access, and wastes resources on unnecessary protection. Under-classification occurs
when information is not classified restrictively enough. It risks unauthorized disclosure, legal
liability, and harm to individuals or the organization.

Public administrators must exercise judgment in classifying information. They must understand
the legal requirements, the potential harms of disclosure, and the public interest in transparency.
When in doubt, they should consult with legal counsel, privacy officers, or security officials.

2.5 Classification by Function and Use

Administrative Information

Administrative information supports the internal management and operations of the organization.
It is the "housekeeping" information that keeps the organization running.

Examples include financial records (budgets, expenditures, receipts, audits); personnel records
(employee files, attendance, payroll, benefits); procurement records (vendor files, contracts,
purchase orders, invoices); facilities records (building plans, maintenance logs, equipment
inventories); and correspondence (incoming and outgoing letters, emails, memos).

Management considerations for policy information include version control for tracking
document evolution; attribution for understanding the source of ideas and analyses; archiving for
preserving the historical record of policy decisions; and accessibility for researchers, historians,
and future policymakers.
Summary of Modules 1 and 2
These first two modules have established the conceptual foundation for organisation information
management.

You have learned that information is a strategic organizational asset, distinct from data and
knowledge, and that its quality directly affects organizational performance, legal compliance,
and public trust.

You have learned the information lifecycle—creation, storage, retrieval, use, archiving, and
disposal—and understand that each stage requires specific policies, procedures, and
competencies.

You have learned to classify information by structure (structured, semi-structured, unstructured),

by source (internal, external), by organizational level (strategic, tactical, operational), and by
sensitivity (public, restricted, confidential).

These concepts are not merely theoretical. They provide the framework for everything else you
will learn in this course. In subsequent modules, we will build on this foundation to explore
filing systems, retrieval methods, electronic document management, information technology
infrastructure, legal and ethical frameworks, and emerging trends.

Master these concepts, and you will be prepared for the practical challenges of managing
information in public organizations. Neglect them, and you will struggle to understand why
systems fail, why staff resist, why costs escalate, and why information that should be available
cannot be found.

The quality of governance depends on the quality of information management. As future public
administrators, you have a responsibility to take this seriously. The citizens you serve deserve
nothing less.