Information governance and assurance : reducing risk, promoting policy / Alan MacLennan