Data governance responsibilities (within the business unit):
Critical Data Elements
- Ensure that each data element has a clear definition and is still being used - or retire those that are not - and that adequate documentation is developed, maintained, and communicated appropriately across the business unit.
- Review and approve data definitions, compliance and data classifications (i.e. UCLASS).
- Establish data-quality metrics and requirements, such as defining acceptable values, ranges, and parameters.
- Establish processes and procedures for detection and correction of data issues, contributing expertise to understand the root cause and implement corrective measures.
- Establish procedures and internal controls affecting the quality of data.
- Provide subject matter expertise to guide the discovery, design and development of data solutions focused on achieving quality data in their specific business units.
- Review quality metrics and assessment of progress toward improvements in data quality.
- Prioritize and/or resolve stewardship issues for data elements within the business unit.
- Participate as necessary on Data Governance Working Teams to achieve quality data.
Compile retention, archival, and disposal requirements and ensure compliance with institutional policy, regulations, and business requirements.
Data Access, Privacy, Security, Risk Management
- Oversee access, privacy, security, and risk management pertaining to data in the business unit.
- Define standards and procedures for access to data, including the criteria for authorization.
- Oversight of the access request, approval, provisioning/deprovisioning processes to ensure they are appropriate and commensurate with risk.
- Establish guidelines and protocols that govern the proliferation of data to ensure that privacy controls are enforced in downstream systems and processes.
- Establish information security requirements, including data classification and identification.
- Be informed of regulatory and compliance requirements relevant to the business unit data in order to evaluate risks to its confidentiality, integrity, or availability.
- Establish incident-detection controls.
- Evaluate any suspected or actual breaches or vulnerabilities in confidentiality, integrity, or availability and notify the DGA.
Advocacy and Collaboration
- Advocate for continuous improvement in the use of data as a result of practicing data governance.
- Participate in the collection and development of data documentation and other education / communication materials associated with data in the business unit.
- Ensure data decisions are communicated to the business unit.
- Understand who and how their data is consumed, in and outside the business unit.
- Work to ensure data consumers have an understanding of the data (in order to use effectively).