A public-works superintendent keeps a personal discipline spreadsheet with employee Social Security numbers and notes outside the HRIS. The CHRO is aligning HR processes to the enterprise data-protection strategy. What should the CHRO do?
Select an answer to reveal the explanation.
Short Explanation
A private discipline workbook with SSNs is a second personnel file hiding in a desk drawer. Calling it a supervisor tool does not put it under the city's protection rules. Either fold it into the official system or kill it—do not clone it onto a shared drive.
Full Explanation
Shadow HR systems are a data-protection failure because they hold sensitive personnel data outside access control, retention, and audit. Labeling the file a supervisor convenience does not change the risk, and copying it to a shared drive expands exposure. The CHRO should inventory the data, migrate what belongs in the enterprise system, and retire the remainder. Alignment to the city's protection strategy requires that employee data live only in sanctioned repositories.