ONE Data Governance Universe

Governance in Practice

Clear accountability and shared requirements throughout the Data Journey.

Connect strategic direction, tactical coordination and daily execution. Resolve decisions at the lowest level with the authority and capability to act.

L0

Board Members

Highest escalation point

Decide matters beyond the mandate of the Data Governance Board.

L1

Data Governance Board

Strategic Data Owners

Approve policies, standards and priorities. Resolve cross-domain conflicts, ownership gaps and material exceptions.

L2

Data Governance Forum

Tactical Data Owners

Coordinate definitions, standards, quality expectations and role coverage. Prepare roadmap proposals and Board decisions.

L3

Data Working Groups

Data Stewards, Asset Owners and operational contributors

Maintain metadata, monitor quality and coordinate implementation.

Direction flows down. Evidence, business impact and decision requests escalate up.

Connect business outcomes to shared requirements and practical daily work.

  1. Data Strategy

    Vision, choices, priorities and intended outcomes.

  2. Data Management Policy

    Accountability and requirements across the data lifecycle.

  3. Data Management Standards

    Consistent requirements, controls and measures.

  4. Procedures & Guidance

    Activities, templates and evidence for daily work.

12 standard groups across four foundations

Browse the standard groups by foundation.

Data Governance 3 groups
Data Quality 1 groups
Data Operations 6 groups
Data Protection 2 groups

Start with the business process. Keep meaning, accountability and controls visible as data is created, moved, used and retired.

A simple view of how data moves from operational sources to business use, with controls throughout the Data Journey.

Set the business context

  1. 01 Business Processes

    Define the business activity and data needs.

  2. 02 Data Dictionary

    Agree business terms and definitions.

  3. 03 Data Model

    Describe entities and relationships.

Move data from source to target

  1. 04 Source

    Create & modify data in operational systems

  2. 05 Analyse & Profile

    Identify quality issues and resolve them

  3. 06 Ingest

    Bring data into the data platform

  4. 07 Harmonise

    Align and transform for consistent use

  5. 08 Target / Consume

    Use data in reports, operations, analytics & AI

  6. 09 Retain & Dispose

    Keep data as required; then archive or delete it.

Ownership, catalogue and controls support the whole journey.

View all nine journey steps
03

Data Model

Define entities, relationships and structures.

06

Ingest

Bring data into the required platforms.

07

Harmonise

Align, validate and transform for consistent use.

08

Consume

Use data in operations, reporting, analytics and AI.

Assign business accountability, decision rights and daily responsibilities for data.

Business Domain

Strategic Data Owner

Owns domain direction, business priorities and resources. Resolves decisions requiring strategic authority.

Subdomain or agreed local scope

Tactical Data Owner

Turns direction into agreed requirements and actions. Oversees standards and quality expectations.

Data entities and assets

Data Steward

Maintains definitions and metadata, monitors quality and coordinates issue resolution.

Explore supporting roles

Data Maintainer

Keeps source data current and correct. Applies authorised changes and fixes problems at their source.

Data Customer (consumer)

Uses data for an approved purpose, understands quality and use conditions, and reports suspected issues.

Data Asset Owner

Accountable for a dataset, business term, report, KPI or other asset's meaning and suitability within delegated authority.

Each role has a defined scope and authority. A person may hold several roles through explicit appointment.

Regulations & Standards

Regulations and principles that inform the DGU approach to data governance, accountability and controls.

GDPR · Personal data

EU regulation protecting personal data and individuals’ rights, with rules for how organisations process and safeguard personal information.

Read on Wikipedia
BCBS 239 · Risk data

Basel Committee principles for banks’ risk data aggregation and reporting, supported by strong governance, data quality and architecture.

Read on Wikipedia
DORA · Digital resilience

EU regulation strengthening digital resilience in financial services through ICT risk management, incident reporting, testing and third-party oversight.

Read on Wikipedia
SOX · Financial reporting

US legislation improving corporate reporting and accountability, including executive certifications and internal controls over financial reporting.

Read on Wikipedia
AI Act · Responsible AI

EU regulation applying a risk-based approach to AI, with requirements supporting safety, transparency, trustworthy data and human oversight.

Read on Wikipedia
NIS2 · Cybersecurity

EU directive strengthening cybersecurity in critical sectors through risk management, incident reporting and management accountability.

Read on Wikipedia

Regulatory perspectives

Ready to discuss your data challenge?

Tell Piotr what you want to improve. Together, we can identify a practical next step.

Discuss your challenge
v1.56