Data governance and data quality: is it on your agenda or lurking in the shadows?

Similar documents
DATA STEWARDSHIP BODY OF KNOWLEDGE (DSBOK)

EXIN BCS SIAM Foundation. Sample Exam. Edition

Managing IT Risk: The ISACA Risk IT Framework. 1 st ISACA Day, Sofia 15 October Charalampos (Haris)Brilakis, CISA

Data Virtualization Implementation Methodology and Best Practices

Trillium Consulting. Data Governance. Optimizing Business Outcomes through Data and Information Assets

NATIONAL CYBER SECURITY STRATEGY. - Version 2.0 -

IT risks and controls

EGM, 9-10 December A World that Counts: Mobilising the Data Revolution for Sustainable Development. 9 December 2014 BACKGROUND

2 The IBM Data Governance Unified Process

Leadership and Innovation to Every Building Greener THREE-YEAR STRATEGIC DIRECTION TO 2019

"Charting the Course... ITIL 2011 Managing Across the Lifecycle ( MALC ) Course Summary

University of Texas Arlington Data Governance Program Charter

Manchester Metropolitan University Information Security Strategy

Texas Reliability Entity, Inc. Strategic Plan for 2017 TEXAS RE STRATEGIC PLAN FOR 2017 PAGE 1 OF 13

TDWI Data Governance Fundamentals: Managing Data as an Asset

13.f Toronto Catholic District School Board's IT Strategic Review - Draft Executive Summary (Refer 8b)

Incentives for IoT Security. White Paper. May Author: Dr. Cédric LEVY-BENCHETON, CEO

Implementing ITIL v3 Service Lifecycle

GOVERNANCE, RISK MANAGEMENT AND COMPLIANCE TRENDS BY FCPAK ERIC KIMANI

PREPARE FOR TAKE OFF. Accelerate your organisation s journey to the Cloud.

Big data privacy in Australia

POSITION DESCRIPTION

Working with Health IT Systems is available under a Creative Commons Attribution-NonCommercial- ShareAlike 3.0 Unported license.

Academic Program Review at Illinois State University PROGRAM REVIEW OVERVIEW

Information sharing in the EU policy on NIS & CIIP. Andrea Servida European Commission DG INFSO-A3

Position Description. Engagement Manager UNCLASSIFIED. Outreach & Engagement Information Assurance and Cyber Security Directorate.

Assessment of the progress made in the implementation of and follow-up to the outcomes of the World Summit on the Information Society

The Quick CASP USER S GUIDE. What is the Quick CASP? Sample Quality Improvement Plan. >>> page 3. >>> page 7

Level 2 Diploma in Team Leading (combined qualification)

Securing the User: Winning Hearts & Minds to Drive Secure Behavior

RESPONSE TO 2016 DEFENCE WHITE PAPER APRIL 2016

Business Assurance for the 21st Century

Executive Order & Presidential Policy Directive 21. Ed Goff, Duke Energy Melanie Seader, EEI

UAE National Space Policy Agenda Item 11; LSC April By: Space Policy and Regulations Directory

Level 2 Diploma in Team Leading (combined qualification)

ISACA. Certification Details for Certified in the Governance of Enterprise IT (CGEIT )

Promoting Accuracy Through Data Quality: The UC Data Validation Framework

General Data Protection Regulation (GDPR) The impact of doing business in Asia

Deanship of Academic Development. Comprehensive eportfolio Strategy for KFU Dr. Kathryn Chang Barker Director, Department of Professional Development

The Scottish Credit and Qualifications Framework and Chartered Banker Institute

Data Governance Central to Data Management Success

CHARTER OUR MISSION OUR OBJECTIVES OUR GUIDING PRINCIPLES

Next Generation Policy & Compliance

LESSONS LEARNED IN SMART GRID CYBER SECURITY

Security Director - VisionFund International

Awareness and training programs OPTUS MACQUARIE UNIVERSITY CYBER SECURITY HUB

Improving Cybersecurity through the use of the Cybersecurity Framework

TEL2813/IS2820 Security Management

Cyber Security Congress 2017

BPS Suite and the OCEG Capability Model. Mapping the OCEG Capability Model to the BPS Suite s product capability.

Enabling efficiency through Data Governance: a phased approach

Metadata Management as a Key Component to Data Governance, Data Stewardship, and Data Quality Management. Wednesday, July 20 th 2016

Outstanding issues in Solvency II data management requirements

Engineering Improvement in Software Assurance: A Landscape Framework

Business Model for Global Platform for Big Data for Official Statistics in support of the 2030 Agenda for Sustainable Development

Symantec Data Center Transformation

IT Expert (Enterprise Network and Infrastructure Architect)

School of Engineering & Built Environment

Canada Highlights. Cybersecurity: Do you know which protective measures will make your company cyber resilient?

Heads of Internal Audit Webinar. Integrated Assurance. 24 July In partnership with

Data Governance Framework

KENYA SCHOOL OF GOVERNMENT EMPLOYMENT OPORTUNITY (EXTERNAL ADVERTISEMENT)

Optimisation drives digital transformation

Enabling Security Controls, Supporting Business Results

CompTIA Project+ (2009 Edition) Certification Examination Objectives

Boston Chapter AGA 2018 Regional Professional Development Conference Cyber Security MAY 2018

Data Governance. Mark Plessinger / Julie Evans December /7/2017

Ontario Smart Grid Forum: Support Presentation. Tuesday, March 8 th 2011

IT Information Security Manager Job Description

AUDIT OF ICT STRATEGY IMPLEMENTATION

Position Paper of the ASD Civil Aviation Cybersecurity Taskforce

Mission: Continuity BUILDING RESILIENCE AGAINST UNPLANNED SERVICE INTERRUPTIONS

IS Audit and Assurance Guideline 2002 Organisational Independence

Driving Global Resilience

Choosing the Right Cloud Computing Model for Data Center Management

Cybersecurity in Higher Ed

Stony Brook University Data Strategy. Presented to the Data Governance Council June 8, 2017

CESG:10 Steps to Cyber Security WORKING WITH GOVERNMENT, INDUSTRY AND ACADEMIA TO MANAGE INFORMATION RISK

Transforming Healthcare with mhealth Solutions.

Child Protection Manager - Pacific Timor-Leste (PTL)

FIRE REDUCTION STRATEGY. Fire & Emergency Services Authority GOVERNMENT OF SAMOA April 2017

Data Governance Quick Start

WHO SHOULD ATTEND? ITIL Foundation is suitable for anyone working in IT services requiring more information about the ITIL best practice framework.

SYMANTEC: SECURITY ADVISORY SERVICES. Symantec Security Advisory Services The World Leader in Information Security

What s a BA to do with Data? Discover and define standard data elements in business terms

EUROPEAN ICT PROFESSIONAL ROLE PROFILES VERSION 2 CWA 16458:2018 LOGFILE

Swedish bank overcomes regulatory hurdles and embraces the cloud to foster innovation

Security Management Models And Practices Feb 5, 2008

Bringing cyber to the Board of Directors & C-level and keeping it there. Dirk Lybaert, Proximus September 9 th 2016

Managing your process control firewalls real world life cycle challenges

STRATEGIC PLAN. USF Emergency Management

ISSMP is in compliance with the stringent requirements of ANSI/ISO/IEC Standard

SAINT PETERSBURG DECLARATION Building Confidence and Security in the Use of ICT to Promote Economic Growth and Prosperity

The Role of Public Sector Audit and Risk Committees in Cybersecurity & Digital Transformation. ISACA All Rights Reserved.

The Experience of Generali Group in Implementing COBIT 5. Marco Salvato, CISA, CISM, CGEIT, CRISC Andrea Pontoni, CISA

Track 1 // Collaboration & Partnerships

Build confidence in the cloud Best practice frameworks for cloud security

INTRODUCTION TO DATA GOVERNANCE AND STEWARDSHIP

Organizational Privacy Transformation: A case study from Critical Issues to Award Winning Success

Best Practices in Data Governance

Transcription:

Data governance and data quality: is it on your agenda or lurking in the shadows? Associate Professor Anne Young Director Planning, Quality and Reporting The University of Newcastle

Context Data governance is a new and evolving discipline that encompasses: people who are responsible for data quality policies and processes associated with collecting, managing, storing and reporting data IT systems and support that provide the infrastructure It is the exercise of decision-making and authority for data related matters.

Why is data governance important? "The most meaningful way to differentiate your company from your competition, the best way to put distance between yourself and the crowd, is to do an outstanding job with information. How you gather, manage, and use information determines whether you win or lose." Bill Gates

Can you answer these questions? What types of institutional data are collected in your university? Who is responsible for the quality of that data? (timeliness, accuracy, completeness, useability) How and where are the data stored and accessed? How are the data used and by whom? 4

Can you answer these questions? Are there processes for ensuring data security? What do you do when errors are detected? Is there a data dictionary for common terms and how it accessed? Do you have some stories to share about data issues? 5

Collaborative effort by IR and IT at Syracuse University* to address: Problems with access to data Inefficient processes for requesting information Lack of data quality audits Duplication of data No list of data quality initiatives * 2011 AIR Forum in Canada, Yonai and Anderson 6

Some issues to address at Syracuse (continued) Insufficient training and education about data The use of shadow systems Lack of trust and support between units Differences in terminology between units Competing goals rather than complementary ones 7

Solution: form a data governance group to enable better decision-making reduce operational friction protect the needs of data stakeholders train management and staff to adopt common approaches to data issues build standard, repeatable processes reduce costs and increase effectiveness through coordination of efforts ensure transparency of processes Data Governance Institute. Goals and principles for data governance. http://www.datagovernance.com/adg_data_governance_goals.html 8

Areas of focus for data governance Policies, standards and strategy Data quality Privacy, compliance and security Architecture and integration Data warehousing and business intelligence Management alignment Thomas, G. The DGI data governance framework. http://www.datagovernance.com/dgi_framework.pdf 9

Ownership of data vs Stewardship Principle is that people and areas don t own the data it is a university-wide asset Data stewardship is a system where segments of the data lineage (from creation through to reporting) are documented and responsibilities assigned for each segment The approach is challenging, time consuming and complex but it works 10

Who should be involved? Depends on the concerns to be addressed in the organisation Encourage input from all interested parties. For the group to achieve its goals, it must receive appropriate levels of leadership support. Where it sits within the organisational chart is less important than having the right people involved Participants need to see what s in it for them 11

What can go wrong? Too much focus on data alone rather than ensuring integrity of data, processes, documentation, dissemination Trying to tackle too many issues at the same time Starting with an institution-wide problem (better to start small) Failure to gain support and no accountability Attitude that IT solutions will fix all issues 12

Issues at the University of Newcastle changes in names or coding of data elements not communicated to all users changes in input systems whereby some data items were no longer collected spikes in missing data for some elements system upgrades that had unintended downstream impacts on the data warehouse. 13

UoN Data Governance Advisory Group established in 2010 growing interest in having a cross institutional forum for the exchange of ideas on data-related issues. representatives from a broad range of areas responsible for data (including data collection, reporting, security, archiving, systems) build a shared awareness of data-related issues to be addressed monthly meetings, chaired by Director Planning, Quality and Reporting 14

Early outcomes of the DGAG at UoN Register of data collections (what, where, when, why, who, uses internally and externally) Short presentations from a few areas at each meeting Data quality projects identified Working groups formed Taking a pro-active approach to prevent problems Clarify and assign responsibilities Improve processes, communication and documentation Promote a culture of continuous improvement 15

Challenges for a Data Governance Group * contribute to standardised data definitions prioritise the need for policies and help draft those policies identify and reconcile gaps in processes and documentation assign accountabilities in areas where that has been unclear review and update accountabilities to reflect current structure and responsibilities * Data Governance Institute. Data governance with a focus on policy, standards, strategy. http://www.datagovernance.com/fc_policy_standards_strategy.html 16

Challenges for a Data Governance Group (cont) report progress on data quality improvement initiatives report on compliance with policies track decision making for data-related processes establish data quality rules, particularly with respect to missing data better understand those data items that are reported externally for regulatory or benchmarking purposes discuss and improve how data are being reported internally 17

Challenges for a Data Governance Group (cont) actively monitor data quality discuss collection, storage and access to sensitive data assess risks and controls around data security discuss system integration requirements bring cross-unit attention to integration challenges establish rules for data usage and data definitions identify stakeholders, clarify accountabilities and confirm decision rights 18

Why is data governance important to IR? Delaney (2009) states that institutional researchers can best serve higher education in the twenty-first century by enhancing their current roles and adopting new roles to exert greater influence on decision making 19

The role of Institutional Researchers? Need to be connected within the university to understand the context for reports, to contribute to analysis, interpretation and recommendations Need to be proactive not reactive Mix of quantitative and qualitative research and analysis skills Ability to work effectively with academic and admin staff and with students and other stakeholders Communicate in lay language and build consensus High tolerance for visibility Strong leadership skills 20

Discussion