Data Governance
Data Governance
Data Governance
Data Governance
Description
Although its value is not represented on the balance sheet, data is one of the most important assets in an organization. Data represents an organization's customers, employees and suppliers; its activities and transactions; and its outcomes and results. Managed correctly data can become an organization's most valuable asset; helping it to remain competitive and agile, to proactively meet customer needs and to keep costs in check. As a practice with roots in corporate and Information Technology (IT) governance, data governance is defined as the processes, policies, standards, organization and technologies required to manage and ensure the availability, accessibility, quality, consistency, auditability and security of data in an organization.
Growing Revenue
One of the most important goals of almost any business is to grow revenue; and one of the most effective ways to grow revenue is to increase cross-sell/up-sell rates and improve retention among existing customers. To do so, organizations need a broad and deep understanding of their existing customers. They need a "single view of the customer" in order to be able to provide superior service and to better target campaigns and offers based upon a specific customer's needs. Customer data is often scattered across dozens or even hundreds of different business systems. To resolve these data issues, companies must address the underlying organizational,
Lowering Costs
While the pressure to lower costs is not as intense as it has been in recent years, increasing operational efficiency is still a major priority for most organizations. One of the important ways organizations can reduce costs and increase operational efficiency is to automate business processes. For example, organizations may automate their procurement processes to lower purchasing and administration costs. While business process automation increases efficiency, problems with enterprise data prevent companies from capitalizing on the full potential of operational efficiency initiatives. Streamlining business processes across multiple financial, human resource, sales and other business systems requires that the structure and meaning of data be reconciled across those systemsa task that has often been an afterthought in operational efficiency initiatives. The need to lower costs is driving projects such as supplier or product master data management that enable companies to streamline core business processes (e.g., inventory and supply chain management) by rationalizing, cleansing, and sharing key master data elements. Data governance plays a critical role in the success of such projects, providing a structure for addressing the organizational and process issues around master data.
Ensuring Compliance
Doing business today requires compliance with a growing number of external regulations as well as with internal corporate governance policies designed to increase transparency and prevent corporate malfeasance and fraud. To ensure compliance with regulations such as Sarbanes-Oxley, Basel II, the U.S. Patriot Act, and the U.S. Health Insurance Portability and Accountability Act (HIPAA) and with internal policies and controls, companies must streamline the collection of reporting data. For many regulations they must also document the sources of the data being reported, certify its accuracy and implement specific governance policies. When it comes to how it handles its data, complying with these regulations and policies can be a burden to a company. Data governance is an essential foundation for ensuring compliance. It establishes the rigorous data standards, policies and processes that are required by regulations and corporate governance policies, and it helps to automate compliance-related tasks (while lowering costs). It also helps to ensure auditability and accountability for the data.
Industry Perspective
To understand how data governance is evolving as a practice today, let's review its roots in the broader context of corporate and IT governance.
Implementation Approach
At the highest level, the recommended best practice is to use a 4-step implementation approach: 1. Understand the organization's overall business objectives and related data challenges. 2. Select one high-impact business initiative and build a data governance pilot project around it. 3. Evaluate the data integration technology's ability to support a data governance program. 4. Launch a formal data governance program based on a common framework and methodology. Step 1 - Identify the critical business objectives for the organization, understand the related requirements for data and review the data challenges that act as current or potential future barriers to achieving those objectives. Are there any regulatory or compliance requirements that demand immediate action? Do users have difficulty accessing or finding data? Do managers have the data they need to make decisions? Is the data consistent across different functions and business units? Can the validity of the data be certified? If there are data challenges, document the extent of the issues and the estimated impact on the business. This information can provide the justification for investing in a data governance program. Step 2 - After understanding the organizations overall business objectives, select one key business initiative on which to focus. This initiative should be one that poses significant data challenges, but also is expected to have a visible impact on the business. A pilot project for data governance (tied to this business initiative) will increase the likelihood of success for the business initiative, while also proving out the business value of a data governance program. The pilot project is also a good opportunity to build a strong collaborative relationship between business and IT groups and to gain executive sponsorship. Step 3 - Evaluate the existing data integration technology infrastructure and its ability to support data governance practices. While the technology by itself wont assure the success of a data governance program, it is an essential enabler for all six of the key data attributes accessibility, availability, quality, consistency, auditability and security. To support a data governance program in a scalable and consistent manner across the entire organization, the organization needs a unified enterprise data integration platform that offers: Broad access to all enterprise data, regardless of type, structure, or source from mainframe and midrange systems to XML documents and spreadsheets.
Some of the key features and advantages of this methodology in comparison to other industry methods are:
Meeting Agenda An effective data governance committee structures the agenda for its meetings to focus on the issues that need discussion and action. It is easy to fall into the trap of spending most, if not all, of limited meeting time on status reports and updates, rather than on understanding issues and taking action to mitigate risks. If conducted correctly, a DG committee meeting should take no more than two hours and should result in a clear understanding of the issues requiring resolution and the actions needed to move forward. The agenda below illustrates the course of a typical DG committee meeting. The initial meeting of the committee would follow a different agenda, focusing on a review of program objectives, the expectations of the sponsors, the charter of the committee and the procedure for future meetings. Administrative Techniques To ensure full participation, it is important to set the meeting schedule up to six months in advance. Meetings should normally be held at intervals of four to six weeks during the initial start-up phase and may be reduced to as few as once every three months after the program is well established and operating smoothly. Since the timely identification of items requiring action is a key purpose of the committee, long intervals between meetings or meetings that are frequently rescheduled or canceled defeat this purpose. For any data governance program, an inability to set and stick to a regular schedule of meetings attended by senior participants should be considered a serious risk by itself, and should lead the sponsor to question whether the program has the necessary executive-level support to succeed. Finally, while it is useful to have people with relevant information and expertise attend as needed, the DG committee meetings should not be allowed to grow too large. Regular attendance should be limited to the senior executive participants and key program managers. In general, it is not acceptable for an executive to send a representative, since the representative would not have the authority to make decisions and commitments at the meeting. Critical Success Factors
The following sections examine the four data governance components in more depth. Standards A key function of data governance is to establish the standards for data in an enterprise. Organizations need to establish data definitions and taxonomies, define master data, develop enterprise data models and enforce development and technical standards related to data. Core principles of effective standards include the following: Develop Enterprise Reference Models. First and foremost, an organization requires a common language to describe its business functions and business data. This model must be independent of organizational structure and technology implementation. In short, it should describe what the enterprise does (not how it does it) and the information that is used/created/modified by the functions and it should do so in a mutually exclusive and comprehensive functional decomposition. This enterprise model serves as the cornerstone of a common language across the enterprise and must therefore represent all business areas and all functional groups at a level that is meaningful to executives. Differentiate Between Data at Rest and Data in Motion. The standards that apply to data that is persisted in a database are different than the standards that apply to data that is being exchanged between applications both inside and outside the firewall. The standards should be clear on when they apply to which category. Support Domain Specific Variants. This principle recognizes that data adapts to meet local needs and that rigid specifications should be imposed only on very selective master data. Invest in Re-useable Code for Standards. This principle suggests that a more effective
By taking a lifecycle approach to data integration, the technical capabilities of the data integration platform are brought to bear as part of the ongoing data governance program; with the goal of continual improvement of key data metrics and accountability for them. A Technology Evaluation Checklist is included as a Velocity Sample Deliverable.
Further details for layers 3 and 4 are provided in Information Architecture. Best practices for layers 1 and 2 are generally considered to be well-established industry best practices and therefore are only referenced here.
Competencies
Enterprise Architecture Information Lifecycle Management Metadata Management Modeling Management