Investigative information management
A structured introduction to the information environment behind complex investigations.
What information management contributes
Investigations do not become stronger simply by collecting more material. Information must be structured, protected, traceable, retrievable and usable. Good investigative IM connects information architecture, databases, documents, security, quality control, analysis, reporting and preservation.
A flexible conceptual model
Common entities include people, events/incidents, organizations, locations, sources/interviews, documents/items, allegations/violations and cases/files. The exact model depends on mandate, law, institutional policy and investigative purpose.
Key terms in plain language
The ability to trace where information came from, its context and any transformations applied to it.
Information that describes an item, such as date, source, location, document type or sensitivity.
A structured category such as a person, event, organization, location or document.
Documentation used to trace possession, transfer and handling of an item when required.
Checks for completeness, duplicates, errors, missing information and inconsistent terminology.
Keeping information, context and usability intact over time.
Core capabilities
Architecture
Entities, identifiers, metadata, controlled vocabularies and relationships.
Protection
Data minimisation, confidentiality, access, integrity, retention and responsible disclosure.
Quality
Validation, duplicate control, correction tracking and provenance.
Analysis
Timelines, linkages, patterns, geography and structured outputs.
Preservation
Retention, migration, archival documentation and handover.
Technology
Databases, repositories, eDiscovery, digital evidence and carefully governed AI-assisted tools.