How to make data governance practical

Issue 3 2022 Security Services & Risk Management, Commercial (Industry)


Gary Allemann.

For many businesses, data governance is not well received. This is because governance programmes are far too often driven by supporting functions – like compliance or IT – with a focus on the needs of these supporting functions. The result for many stakeholders is that they feel like they are being given a lot of new tasks to fit into their week, without any real benefit.

Data governance is not about data governance

Any approach that implements data governance without clear use-cases that support multiple stakeholders will struggle. This does not mean that governance should not start small – it should. By selecting one use-case where an organisation can deliver value and where it has support, it increases its chances of success as long as:

1. Its governance programme directly includes stakeholders that benefit from the use-case selected.

2. It does not force work upon people for whom the use-case is not adding value.

3. It agrees to a roadmap and plan to include additional use-cases to support additional stakeholders and keep these additional stakeholders updated on progress through its communications plan.

Data governance is typically about formalising ad hoc information gathering and decision-making processes (about data) so that they become repeatable. If too many people are engaged too early, many will lose interest because they have nothing to contribute to the information gathering or decision making for the use-case in focus, or because they cannot see how this will be applied to support them.

The right level of communication engages different stakeholders at different levels of detail, managing expectations while expecting more effort from those that are getting the immediate benefit.

What are potential use-cases?

The right use-case will vary from one organisation to another and could, for example, be one of these:

1. Delivering better insights more quickly. Decision support remains one of the most visible applications of data. Yet, for many managers, analytics takes too long and when reports are delivered, the results are treated with suspicion. Data governance use-cases that can be explored to improve the delivery of insights could include:

a.Improving access to data by cataloguing and publishing datasets, identifying owners and approval processes for data access requests, and delivering fine-grained access control policies.

b.Improving trust in data by making data quality visible, adding context such as definitions for calculations used and confirming the data lineage.

2. Operational efficiency. Almost any business process generates data. Inaccurate or incomplete data at the first point of capture has a huge impact on downstream business processes that require the missing data, as discussed in the 1:10:100 rule. Fixing data captured incorrectly costs around 10 times what it would have cost to capture correctly the first time, while leaving bad data can cause errors that may cost a hundred times the original cost of capture.

Use-cases that can be explored to increase operational efficiency typically focus on data integrity; for example, agreeing on data capture standards and policies, defining data quality rules, applying data quality metrics, and managing data quality remediation issues. These use-cases are explored in a recent Precisely webinar: Fuelling Enterprise Data Governance with Data Quality.

Data governance also helps in improving IT efficiency. By ensuring that vital data specifications are available and accessible for impact analysis, data governance practices support agile development methodologies like DevOps and DataOps. Key data governance use-cases include the delivery of quality metadata, processes to ensure collaboration across cross-functional teams, and managing requirements specifications and approvals to speed quality delivery.

3. Managing data risk. Data risk can largely be separated into reporting risk – which comes down to the delivery of trusted data in regulated industries – and data privacy risks. PoPIA implementation requires a series of data management capabilities and processes to be implemented with governance oversights. These can offer a range of possible use-cases to kickstart data governance.

Data governance is not new. In most organisations, decisions are regularly made to support data projects. Executives need to take responsibility for data breaches, or to sign off financial reports as accurate. Data governance, as a discipline, should be about reducing the overheads associated with these tasks through collaboration and reuse.




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Smarter access, stronger defence
Secutel Technologies Security Services & Risk Management Access Control & Identity Management Retail (Industry)
The holiday season brings excitement, increased foot traffic and, unfortunately, a spike in criminal activity targeting retail environments. Taking a proactive approach to security is essential in ensuring staff and assets remain safe.

Read more...
AI rewrites financial crime
Security Services & Risk Management Financial (Industry)
Criminals are exploiting South Africa’s high connectivity and still-maturing regulation to scale attacks faster than we can defend them. The speed and sophistication of these scams are outpacing the systems designed to stop them.

Read more...
Strengthening organisational integrity in 2026 and beyond
iFacts Security Services & Risk Management
In 2026, the risks facing organisations, whether in the corporate sector or government, will be more complex and far-reaching. Employee screening will have to be more complex and comprehensive.

Read more...
Syndicates exploit insider vulnerabilities in SA
Information Security Security Services & Risk Management
Today’s cyber criminals do not just exploit vulnerabilities in your systems; they exploit your people, turning trusted team members into unwitting accomplices or deliberate collaborators in their schemes.

Read more...
ArxTech: Over 30 years of evolving security solutions for South Africa’s toughest challenges
Security Services & Risk Management Integrated Solutions
[Sponsored] For over 30 years, a Centurion-based company has helped shape how security technology is designed, deployed, and supported in South Africa. Originally known as CellSecure, it now operates as ArxTech.

Read more...
Don’t Miss the Exclusive Launch of the AirXpress 3 SCBA
Security Services & Risk Management
Be the first to experience the all-new AirXpress 3 Self-Contained Breathing Apparatus (SCBA), designed and manufactured by MSA, and brought to you by PSA Africa.

Read more...
Transform WhatsApp chaos into real-time security intelligence
Security Services & Risk Management
The HYDRA AI security intelligence software plugs into existing guard chat groups to automatically convert voice notes, photos, and texts into structured, real-time security data and insights.

Read more...
SABRIC Annual Crime Statistics 2024
News & Events Security Services & Risk Management Residential Estate (Industry)
SABRIC has released its Annual Crime Statistics for 2024, reflecting a significant decline in financial crime losses, but also warning of the growing threat posed by artificial intelligence (AI) in fraud schemes.

Read more...
Health, safety, and environmental eLearning
Training & Education Security Services & Risk Management
SHEilds is a global leader in health, safety, and environmental eLearning, delivering internationally recognised qualifications such as NEBOSH, IOSH, IEMA, and ProQual NVQs.

Read more...
See crime stopped in seconds
Products & Solutions Security Services & Risk Management
Fog Bandit, a leader in security fog, is bringing its instant crime-stopping technology to Securex Cape Town 2025. Experience the innovation trusted worldwide to protect retailers, warehouses, and high-value sites.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.