ACCOUNTANT_SUMMER18_AMENDED_PG12

DATA GOVERNANCE
effectively manage every data point, so a risk-based
approach will help you focus on the data that matters
most to your business. This approach, when combined
with a ‘lines of defence’ assurance framework will help
you manage and sustain the quality of your data.
The scope and “rules” for populating the Data Directory
form part of the Policy for Data Quality. A Data Deficiency
Log can be used to manage potential issues with data
quality or controls that are identified through the
monitoring process.
Assurance, encompassing self-assurance (1st Line),
management compliance review (2nd Line) and internal
audit (3rd Line), is needed to give you confidence that
your data controls are appropriately designed, embedded
and effectively operating.
Common and well understood principles are at the
heart of a successful data governance framework. These
should be well articulated and aligned to the values and
needs of the business. A robust governance structure will
also consider all lines of defence:
• The business as Information Owners and Stewards;
• The Data Governance Centre of Excellence
managing policy
• Internal or external audit, assessing overall
effectiveness
Wherever possible, data governance responsibilities
should be embedded within existing structures rather
than building new ones.
Cultural and behavioural changes are also crucial to
improving both the underlying quality of data and proactively
managing data issues. Where required, these
expectations should be agreed, formalised and monitored
as part of a formal individual performance management
process. Additional skills and resources will be required to
design, operate and monitor data governance which can
be developed through training or recruitment.
The success of any data quality project depends on
the adoption of a data governance model across the
organisation. The implementation of such model
typically follows a multi-year, multi-phase approach;
therefore, it is essential to factor time and resources
upfront for establishing a governance model. That model
should to be scalable, flexible, and adaptable to the
different needs of the organisation. The objective is to
change how the organisation manages information, so it
The Data Directory is
one of the cornerstones
2 nd Line of defence
can be effectively used to
help to achieve business
of effective Data
Business Governance
goals such as, driving
Governance. It
down business costs,
Data Governance Board
describes the following
Business and IT Representatives
improving competitive
in clear business terms:
Data Governance Framework
position, or meeting
• The uses of data
Principles based 'rules' or 'values' by which you
risk and compliance
manage information
– in this case the
objectives. The approach
uses of the data in
Policy &
Data Dictionary Deficiency
Standards
& Business & Change to achieve data quality is
the data book
Glassary Management
• The quality
Data Governance Centre of Excellence
not different to achieving
requirement of
Support and on-going compliance monitoring
quality in other parts of
the data based
on those uses –
this is typically
defined in terms
of completeness,
accuracy and appropriateness
Business - Data Owners and Steward
Processes, Controls, Procedures and Systems
continuous improvement.
an organization. Defining
clear targets, monitoring,
measuring and providing
a feedback mechanism for
• The sources of data and how these are mapped to
the uses – this allows the generation of the data
residency matrix and of data flows
If you want your organisation to excel further in the digital
age, data governance matters.
• The controls and metrics that are in place that
•
support the achievement of the required data quality
References:
The monitoring that is required of these controls
https://www.pwc.fr/fr/assets/files/pdf/2016/05/pwc_
and metrics to inform the Data Deficiency process
a4_data_governance_results.pdf
1 st Line 2 nd Line
theaccountant.org.mt
19