Data Governance Quickcheck
Extracted from the public Notion original. Notion record created 2019-06-18. Last edited 2019-07-24.
Ownership
Are data owners defined per data domain / subject area?
Original recorded response (0–3): 0
Is there a single accountable executive owner?
Original recorded response (0–3): 1
Is there a data governance manager?
Original recorded response (0–3): 1
Relationship to risk
Is the data governance framework or an associated policy considered a formal policy?
Original recorded response (0–3): 0
Is data risk considered a subset of operational risk?
Original recorded response (0–3): 0
Are data quality issues considered against defined materiality standards and raised as risks?
Original recorded response (0–3): 0
Relationship to strategy
Is there a data governance program of work and associated budget?
Original recorded response (0–3): 0
Is there a clear understanding of the data domains / subject areas that must be managed across business units?
Original recorded response (0–3): 0
Does the data governance function have sufficient control over the scope and stakeholders of major projects?
Original recorded response (0–3): 0
Data structure & flow
Are common data models maintained for critical data domains / subject areas, and understood across business and technical teams?
Original recorded response (0–3): 0
Are you able to prove that each team has access to the data required to perform their role, and no more?
Original recorded response (0–3): 0
For declared, critical data elements, are you able to demonstrate data is accurate, show where is comes from without forensic investigation?
Original recorded response (0–3): 0
Data quality management
Is there a data quality management process that everybody in the organisation is aware of and with an active log of data quality issues?
Original recorded response (0–3): 1
Are there approved data quality checks that are automatically performed on data sets, with associated reporting, tolerances, and automatic generation of data quality issues?
Original recorded response (0–3): 1
For critical data elements (or all data elements if no process for declaring critical data elements exists) are their tolerances defined which allow materiality assessments of data quality issues for consideration as enterprise risks?
Original recorded response (0–3): 0
Data versus technology separation
It the distinction between owning the data governance function versus data ownership clear? (including who owns the residual risk where there is no data owner for a data domain / subject area or business owner for an IT application)
Original recorded response (0–3): 0
Are interfaces between systems considered data flows under the data governance framework and registered in a system used by data owners?
Original recorded response (0–3): 0
Are process, manual processes, use cases, business capabilities, transition of data to third parties, and any other movement of data registered in a system used by data owners?
Original recorded response (0–3): 0