Data ownership within governance: getting it right

Similar documents
Enabling efficiency through Data Governance: a phased approach

Implementing a Successful Data Governance Program

ITIL : Professional Education Training. Innovative solutions for modern businesses.

Planning and Implementing ITIL in ICT Organisations

THE TRUSTED NETWORK POWERING GLOBAL SUPPLY CHAINS AND THEIR COMMUNITIES APPROVED EDUCATION PROVIDER INFORMATION PACK

EUROPEAN ICT PROFESSIONAL ROLE PROFILES VERSION 2 CWA 16458:2018 LOGFILE

WEEE disposal and the creation of social value. Jon Selby Tier 1 Asset Management Ltd

Manchester Metropolitan University Information Security Strategy

PROCEDURE POLICY DEFINITIONS AD DATA GOVERNANCE PROCEDURE. Administration (AD) APPROVED: President and CEO

Achieving effective risk management and continuous compliance with Deloitte and SAP

2 The IBM Data Governance Unified Process

Supporting the Cloud Transformation of Agencies across the Public Sector

OKhahlamba Local Municipality

Revisit the Foundations of ITSM SMSG

SCHEME OF DELEGATION (Based on the model produced to the National Governors Association)

New Zealand Government IBM Infrastructure as a Service

PREPARE FOR TAKE OFF. Accelerate your organisation s journey to the Cloud.

Module 7 TOGAF Content Metamodel

Online Digital Transformation Courses COB Certified E-Commerce & E-Business Manager E-Learning Options

WHO-ITU National ehealth Strategy Toolkit

HPE Network Transformation Experience Workshop Service

What is IT Governance and Why is it Important?

COBIT 5 Implementation

GOVERNANCE, RISK MANAGEMENT AND COMPLIANCE TRENDS BY FCPAK ERIC KIMANI

AUDIT OF ICT STRATEGY IMPLEMENTATION

Agile Master Data Management TM : Data Governance in Action. A whitepaper by First San Francisco Partners

Cloud solution consultant

COURSE BROCHURE. ITIL - Intermediate SERVICE STRATEGY Training & Certification

SERVICE TRANSITION ITIL INTERMEDIATE TRAINING & CERTIFICATION

DATA GOVERNANCE LEADS TO DATA QUALITY

Institute of Internal Auditors 2019 CONNECT WITH THE IIA CHICAGO #IIACHI

Innovation Infrastructure Partnership

ISO STANDARD IMPLEMENTATION AND TECHNOLOGY CONSOLIDATION

PROTECT YOUR DATA, SAFEGUARD YOUR BUSINESS

UK Permanent Salary Index November 2013 Based on registered vacancies and actual placements

Competency Definition

B. To ensure compliance with federal and state laws, rules, and regulations, including, but not limited to:

Building YOUR Privacy Program: One Size Does Not Fit All. IBM Security Services

Managing IT Risk: The ISACA Risk IT Framework. 1 st ISACA Day, Sofia 15 October Charalampos (Haris)Brilakis, CISA

IT Governance ISO/IEC 27001:2013 ISMS Implementation. Service description. Protect Comply Thrive

Cloud solution consultant

2017 RIMS CYBER SURVEY

The Government IT Profession: Embedding IT Professionalism in Your Organisation

3. LABOR CATEGORY DESCRIPTIONS

KENYA SCHOOL OF GOVERNMENT EMPLOYMENT OPORTUNITY (EXTERNAL ADVERTISEMENT)

"Charting the Course... ITIL 2011 Managing Across the Lifecycle ( MALC ) Course Summary

The Data Governance Journey at Principal

Stakeholder feedback form

CESG:10 Steps to Cyber Security WORKING WITH GOVERNMENT, INDUSTRY AND ACADEMIA TO MANAGE INFORMATION RISK

SERVICE OPERATION ITIL INTERMEDIATE TRAINING & CERTIFICATION

COB Certified E-Commerce & E-Business Manager E-Learning Options

WELCOME TO ITIL FOUNDATIONS PREP CLASS AUBREY KAIGLER

Best Practices in Data Governance

Law & Policy Meets Data in the Cloud: Data Sovereignty Across Asia. Bernie Trudel Chairman, Asia Cloud Computing Association

the steps that IS Services should take to ensure that this document is aligned with the SNH s KIMS and SNH s Change Requirement;

Presenter: Ian Musweu FCCA, FZICA, CRA. Head of Risk and Assurance Professional Insurance

COURSE BROCHURE. ITIL - Intermediate Service Transition. Training & Certification

MANAGED TALENT SOLUTIONS

Canada Life Cyber Security Statement 2018

ICB Industry Consultation Body

Global Statement of Business Continuity

ROLE DESCRIPTION IT SPECIALIST

Governance and Compliance Learning from the Private Sector. David Coverdale

Uptime and Proactive Support Services

5G outlook for Asia Pacific: market impact and standardisation programmes

Mid-Market Data Center Purchasing Drivers, Priorities and Barriers

Unified Governance for Amazon S3 Data Lakes

GRIDS INTRODUCTION TO GRID INFRASTRUCTURES. Fabrizio Gagliardi

UNEP Finance Initiative Regional Roundtable in Latin America 5-6 th September, 2017, Buenos Aires. Benoit Lebot, IPEEC

PROJECT MANAGEMENT PROFESSIONAL (PMP)

Striving for efficiency

Professional certification from BCS, The Chartered Institute for IT. bcs.org/certification

Foundation. Become a ITIL Foundation Certified Professional from our exclusive 2 full day. conducted by authorized faculties from APMG.

Incentives for IoT Security. White Paper. May Author: Dr. Cédric LEVY-BENCHETON, CEO

Organization/Office: Secretariat of the United Nations System Chief Executives Board for Coordination (CEB)

Helping shape your future

SERVICE DESIGN ITIL INTERMEDIATE TRAINING & CERTIFICATION

ITIL Foundation Program Certification Program. The Minimum number of students per session is 6 where the maximum is 25.

Oracle Buys Automated Applications Controls Leader LogicalApps

Wye Valley NHS Trust. Data protection audit report. Executive summary June 2017

13.f Toronto Catholic District School Board's IT Strategic Review - Draft Executive Summary (Refer 8b)

ITIL Intermediate Service Transition (ST) Certification Training - Brochure

ITIL 2011 Overview - 1 Day (English and French)

National Council for Special Education. NCSE Support Service Assistant National Coordinator Job Description and General Notes

A guide for assembling your Jira Data Center team

Establishing a Healthcare Data Quality Assurance Initiative. Session 410, March 7, 2018 Omid Shabestari, MD, PhD Tonja Locklear, PhD

Department of Justice Policing and Victim Services BUSINESS PLAN

Data Governance Quick Start

ICT Mentors e-learning portfolio provides our delegates with materials for study at the comfort of their homes, work place etc.

Foundation Learning as a progression route to. Apprenticeships. The Toolkit

Position Title: IT Security Specialist

Information Security Governance and IT Governance

Work smarter with. at your fingertips ENTER

Abu Dhabi e Government Strategy and ICT Standardization. Abu Dhabi, November 2014

Implementing ITIL v3 Service Lifecycle

Introduction... 1 Part I: How ITIL Can Help You... 7

Getting Started with ITIL

DEPARTMENT OF HEALTH and HUMAN SERVICES. HANDBOOK for

Responsible Officer Approved by

Managing Privacy Risk & Compliance in Financial Services. Brett Hamilton Advisory Solutions Consultant ServiceNow

Transcription:

Data ownership within governance: getting it right Control your data An Experian white paper Data Ownership within Governance : Getting it right - 1

Table of contents 1. Introduction 03 2. Why is data ownership difficult? 04 3. How do businesses overcome this hurdle 05 4. Recognising the Benefits 07 5. Summary 08 About Author Janani joined in 2011 as a senior consultant, providing businesses with strategic consulting integrating Experian data and technology within enterprises. Her current focus is management consultancy specialising in data governance and strategy, where she oversees the development, promotion and delivery of data governance, data quality strategy and data lifecycle management consultancy. Prior to Experian, Janani held roles as a business and technology consultant over thirteen years delivering high-value and challenging business projects, with a focus on data modelling and quality, business process improvement, enterprise architecture, business intelligence and multi-channel customer relationship management. She has experience in implementing business processes and supporting technologies for a variety of industry verticals in the UK and USA, covering high-tech, retail, telecommunications, manufacturing, travel and transportation, leisure, business services, local government, business support, education, insurance, banking and finance. Author Janani Dumbleton Data Governance Specialist 2 - Data Ownership within Governance : Getting it right

1. Introduction A successful implementation of a data governance initiative is highly dependent on; the right people having the right users to gain buy-in from the business, the right people to develop the data strategy, the right people being able to identify the right representatives to deliver the objectives of the data strategy that has been set out. Data governance is a quality control discipline that covers the acquisition, management, storage and usage of information or data within a business, with the objective of maximising the value of the organisation s data assets. In layman s terms, this means getting your data and related processes in order, so that the business can maximise value from it. Implementing this control requires a body of people to drive the initiative, manage the tasks and make critical decisions. It is often represented as the data governance office or council. The data governance office usually consists of several management stakeholders, a data steward and a data custodian. The data steward is responsible for the content held within data elements, while the data custodian is responsible for the technical environment and controls around data. Data ownership is often the biggest need identified during a review of Roles and Responsibilities within any data governance initiative. The data owner is often seen to be the person who is ultimately responsible for all decisions made around their specific data in the organisation, and often this responsibility is left to the data steward s role within the data governance office. However, the term owner can be misleading, as it seems to indicate not only ultimate responsibility, but also the ability to use the data for their own purpose, and both are not necessarily true of data use within a business. Hence, data ownership can also be a barrier, as most organisations may object to the idea of one person or role being able to own data, and many users may shy away from any form of ultimate responsibility towards data. This is evident, especially, when it is shared and used by all. Data ownership can also be the cause of strife and may end up with the wrong people being allocated the role due to the inability to find the right candidates. Strategy Compliance & Risk Insight & Reporting Security & Audit Roles & Responsibilities Systems & Architecture Data & Quality Process & Policies Data Ownership within Governance : Getting it right - 3

2. Why is data ownership difficult? Data is a complex entity. It can organically grow through an organisation, growing in size, changing in nature. Data can then lose relevance, getting archived as business needs change. There are multiple business processes, people and technologies that interact with data, in relation to different business objectives. To identify one role or person responsible for ownership of data within an organisation without understanding the various uses of data can be a very simplistic and often the wrong approach. This can lead to delays in getting decisions around data improvement, data quality measures and data strategy. For example, let s take a simple process of a product sale, where the data originates from the call centre. Information Technology The IT manager is responsible for decisions around archiving the customer data once the customer is no longer active. Call Centre The call centre user places an order for a customer, and in the process captures their name, address, email address and communication preferences. Marketing The marketing department enrich the customer record with demographic data. Fulfilment The fulfilment department ships the order and sends an email to the customer; the activity is captured as data against the customer record. Management Management see summarised information that contains the demographic information held against the customer and the purchases made by them. In this very simple data journey, we have various activities and usage scenarios around the same set of customer data, such as: The call centre staff that initially capture and create the data The fulfilment team and management who purely consume and update data The marketing department who consume as well as enrich the data IT who manage the movement and archival of data Most businesses will have more complex data journeys, different types of journeys, and many variations within a journey. This brings to the forefront more people across the organisation that interact with data in different ways. Trying to summarise such a complex relationship with data into a simple term such as data owner, can be quite difficult. 4 - Data Ownership within Governance : Getting it right

3. How do businesses overcome this hurdle? Before the concept of ownership is decided and owners are assigned their roles, taking a step back and mapping out the various interactions business users have with data should be the best place to start. Mapping these high level interactions and identifying the common interactions gives the business the necessary insight into how they use data. For example, in the simplified data journey described, a customer email address could be created, updated, deleted, read, archived, moved, etc. These are specific and individual interactions that all occur on the same set of data, with different parties responsible and accountable for their execution. Once these key data interactions have been recognised, identifying the responsibilities business users have towards these interactions can be mapped out using a simple, but effective method such as the RACI matrix. RACI stands for Responsible, Accountable, Consulted and Informed, and is a way of identifying levels of responsibilities in a process, or in this case, data. So within a data process such as creating data, the term RACI breaks down into: Responsible: The person responsible for capturing the data element. Accountable: The person accountable for the final decision around the data element, may be ultimate owner. Consulted: The person consulted before a decision or action is taken around creation of the data element. Informed: The person informed that a decision or action has been taken. The call centre user is responsible for ensuring the customer email address is captured when taking an order. The call centre manager is accountable for the capture of this data within their business unit. The marketing manager and IT manager are consulted when decisions are made around email capture. The fulfilment manager is informed of changes to email address capture. Data Ownership within Governance : Getting it right - 5

RACI (Responsible, Accountable, Consulted & Informed) Building on this method and completing a matrix for all data held by the organisation, the business will be able to view trends in responsibility and accountability. Through the process owners or people accounted for certain types of data and interactions are naturally recognised. Having a more scientific and granular approach in determining trends of responsibility can reduce conflict when it comes to determining the best candidates when decisions are made around data. It will also ensure that the correct people are allocated responsibilities when changing processes or technologies that use data. Eventually, this process identifies the right people to build the data strategy for the organisation. 6 - Data Ownership within Governance : Getting it right

4. Recognising the benefits The data governance council is a critical component in a successful data governance programme, as it consists of a group of business and technical stakeholders who are responsible for decisions around the management of data. The results of the RACI matrix analysis creates the foundation for the implementation of a data governance council, ensuring that the correct representatives from the business are involved with decisions with data. An ideal data governance implementation, would consist of a central owner of the data governance initiative through a data governance council. They would maintain a federated responsibility structure such as the implementation of a RACI matrix to ensure that decisions around data have the necessary structure for approvals and the best representatives contributing to the process. The following diagram depicts an example of a data governance structure within an organisation. Here, the individuals who were identified as accountable for data processes through the RACI matrix, form part of the subject matter expert group that handle day to day data governance planning and operations. Data Ownership within Governance : Getting it right - 7

5. Summary In summary, having the right people and roles involved in a governance initiative can demystify any confusion around who should be responsible for key data related activities such as; improving data quality, making data processes efficient, buying new data and procuring technology for a data process. Having a clearer vision around the responsibility and accountability towards data can: reduce conflict around data ownership, gain organisation wide buy-in for data governance, and ensure the most appropriate people are involved in decisions around data. About has built up exceptional market coverage assisting customers with their unique data quality challenges. We provide a comprehensive toolkit for data quality projects combining our market leading software with a vast scope of reference data assets and services. Our mission is to put our customers in a position to make the right decisions from accurate and reliable data. The size and scope of data management projects varies considerably but the common factor in all ventures is unlocking operational efficiency and improving customer engagement. We see the potential of data. Whether it s in enabling ambulances to be sent to the exact location of an emergency or attributing charitable donations to the people who need it the most - data accuracy makes all the difference to service provision. For more information please contact us: T (61) 3 8699 0100 E info@au.experian.com W edq.com/au Experian, 2015. All rights reserved The word "EXPERIAN" and the graphical device are trade marks of Experian and/ or its associated companies and may be registered in the EU, USA and other countries. The graphical device is a registered Community design in the EU.