{"id":4713,"date":"2021-06-24T11:10:01","date_gmt":"2021-06-24T15:10:01","guid":{"rendered":"http:\/\/staging.dcamportal.org\/?p=4713"},"modified":"2021-10-14T12:56:28","modified_gmt":"2021-10-14T16:56:28","slug":"key-control","status":"publish","type":"post","link":"https:\/\/staging.dcamportal.org\/fr\/cdmc-key-controls\/","title":{"rendered":"Contr\u00f4les cl\u00e9s du CDMC"},"content":{"rendered":"<div class=\"full-width page-section\">\r\n<div class=\"edm-container\">\r\n<div class=\"knowledgebase-container\">\r\n\r\n    <a name=\"top\"><\/a>\r\n\r\n\t<div class=\"kb-table-of-content\">\r\n\r\n\t\t<div class=\"knowledgebase-home-frisbee\">\r\n            <img data-recalc-dims=\"1\" src=\"https:\/\/i0.wp.com\/staging.dcamportal.org\/wp-content\/uploads\/2021\/10\/cdmc_14_key_controls_diagram.png?w=699\" alt=\"CDMC Key Controls\" title=\"CDMC Key Controls\"   usemap=\"#dcamfrisbeemap\"\/>\r\n            <map name=\"dcamfrisbeemap\" id=\"dcamfrisbeemap\">\r\n                <area shape=\"rect\" coords=\"62,88,215,139\" href=\"#keycontrol08\" alt=\"Data Consumption Purpose\">\r\n                <area shape=\"rect\" coords=\"30,146,184,197\" href=\"#keycontrol07\" alt=\"Entitlements and Access for Sensitive Data\">\r\n                <area shape=\"rect\" coords=\"9,205,163,255\" href=\"#keycontrol06\" alt=\"Classification\">\r\n                <area shape=\"rect\" coords=\"32,262,185,315\" href=\"#keycontrol05\" alt=\"Cataloging\">\r\n                <area shape=\"rect\" coords=\"58,320,214,378\" href=\"#keycontrol04\" alt=\"Data Sovereignty and Cross-Border Movement\">\r\n                <area shape=\"rect\" coords=\"156,382,297,440\" href=\"#keycontrol03\" alt=\"Authoritative Data Sources and Provisioning Points\">\r\n                <area shape=\"rect\" coords=\"305,382,445,438\" href=\"#keycontrol02\" alt=\"Ownership field\">\r\n                <area shape=\"rect\" coords=\"455,381,593,438\" href=\"#keycontrol01\" alt=\"Data Control Compliance\">\r\n                <area shape=\"rect\" coords=\"565,324,719,376\" href=\"#keycontrol14\" alt=\"Data Lineage\">\r\n                <area shape=\"rect\" coords=\"587,257,740,310\" href=\"#keycontrol13\" alt=\"Cost Metrics\">\r\n                <area shape=\"rect\" coords=\"586,190,740,242\" href=\"#keycontrol12\" alt=\"Data Quality Measurement\">\r\n                <area shape=\"rect\" coords=\"564,124,718,176\" href=\"#keycontrol11\" alt=\"Data Retention, Archiving and Purging\">\r\n                <area shape=\"rect\" coords=\"395,66,556,119\" href=\"#keycontrol10\" alt=\"Data Protection Impact Assessments\">\r\n                <area shape=\"rect\" coords=\"224,66,385,119\" href=\"#keycontrol09\" alt=\"Security Controls\">\r\n            <\/map>\r\n        <\/div>\r\n\t\t<!-- end knowledgebase-home-frisbee -->\r\n\t<\/div> <!-- end kb-table-of-content -->\r\n\r\n\r\n\t<div class=\"panel panel-info\">\r\n\r\n    <div class=\"panel-heading collapsed\" data-toggle=\"collapse\" data-target=\"#cdmckc010\"><i class=\"fa fa-fw fa-minus\"><\/i>\r\n    <i class=\"fa fa-fw fa-plus\"><\/i>\r\n    <h3 class=\"upper-matter\">CDMC Terms of Use<\/h3>\r\n    <\/div>\r\n\r\n    <div class=\"panel-body\"><!-- The inside div eliminates the 'jumping' animation. -->\r\n    <div id=\"cdmckc010\" class=\"collapse\">\r\n\r\n        <p>This document is a constituent part of the Cloud Data Management Capabilities (CDMC&trade;) <span class=\"glossaryLink cmtt_1.0 Data Management Strategy &amp; Business Case\"  title=\"Glossary: Model\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Model&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; An executable representation of an idea or theory. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/model\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>model<\/span> (&ldquo;the <span class=\"glossaryLink cmtt_1.0 Data Management Strategy &amp; Business Case\"  title=\"Glossary: Model\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Model&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; An executable representation of an idea or theory. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/model\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>Model<\/span>&rdquo;) and is provided as a free license to any organization registered with EDM Council Inc. (&ldquo;EDM Council&rdquo;) as a recipient (&ldquo;Recipient&rdquo;) of the document. While this is a Free License available to both members and non-members of the EDM Council, acceptance of the CDMC Terms of Use is required to protect the Recipient&rsquo;s use of proprietary EDMC property and to notify the Recipient of future updates to the <span class=\"glossaryLink cmtt_1.0 Data Management Strategy &amp; Business Case\"  title=\"Glossary: Model\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Model&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; An executable representation of an idea or theory. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/model\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>Model<\/span>.<\/p>\r\n\r\n        <p>CDMC&trade; and all related materials are the sole property of EDM Council Inc. All rights, titles and interests therein are vested in the EDM Council. The <span class=\"glossaryLink cmtt_1.0 Data Management Strategy &amp; Business Case\"  title=\"Glossary: Model\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Model&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; An executable representation of an idea or theory. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/model\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>Model<\/span> and related material may be used freely by the Recipient for their own internal purposes. It may only be distributed beyond the Recipient&rsquo;s organization with prior written authorization of EDM Council. The <span class=\"glossaryLink cmtt_1.0 Data Management Strategy &amp; Business Case\"  title=\"Glossary: Model\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Model&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; An executable representation of an idea or theory. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/model\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>Model<\/span> may only be used by the Recipient for commercial purposes or external assessments if the Recipient&rsquo;s organization has entered into a separate licensing and Authorized Partner Agreement with EDM Council governing the terms for such use.<\/p>\r\n\r\n        <p>Please accept these CDMC&trade; Terms of Use by registering at<br> <a href=\"https:\/\/app.smartsheet.com\/b\/form\/b3c66d25074f4422be037da82e64b65f\" target=\"_blank\" rel=\"noopener noreferrer\">https:\/\/app.smartsheet.com\/b\/form\/b3c66d25074f4422be037da82e64b65f<\/a><\/p>\r\n\r\n        <button class=\"opennext\">Open Introduction<\/button>\r\n\r\n    <\/div>\r\n    <\/div> <!-- end panel-body -->\r\n\r\n\r\n    <div class=\"panel-heading collapsed\" data-toggle=\"collapse\" data-target=\"#cdmckc012\"><i class=\"fa fa-fw fa-minus\"><\/i>\r\n    <i class=\"fa fa-fw fa-plus\"><\/i>\r\n    <h3 class=\"upper-matter\">Introduction<\/h3>\r\n    <\/div>\r\n\r\n    <div class=\"panel-body\"><!-- The inside div eliminates the 'jumping' animation. -->\r\n    <div id=\"cdmckc012\" class=\"collapse\">\r\n\r\n        <p>The Cloud Data Management Capabilities (CDMC&trade;) <span class=\"glossaryLink cmtt_1.0 Data Management Strategy &amp; Business Case\"  title=\"Glossary: Model\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Model&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; An executable representation of an idea or theory. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/model\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>model<\/span> defines the capabilities necessary to manage and control data in the cloud effectively. Its creation represents an important milestone in the global adoption of industry best-practices for data management. The <span class=\"glossaryLink cmtt_1.0 Data Management Strategy &amp; Business Case\"  title=\"Glossary: Model\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Model&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; An executable representation of an idea or theory. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/model\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>model<\/span> has been produced by the CDMC Work <span class=\"glossaryLink cmtt_1.0 Data Management Strategy &amp; Business Case\"  title=\"Glossary: Enterprise\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Enterprise&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; (In the Context of Data Management) The level of the organization that performs organization-wide business and\/or control function activities. &lt;\/div&gt;&lt;div class=cmtt_synonyms_wrapper&gt;&lt;div class=cmtt_synonyms_title&gt;Synonyms: &lt;\/div&gt;&lt;div class=cmtt_synonyms&gt;Group&lt;\/div&gt;&lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/enterprise\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>Group<\/span> that was formed by the EDM Council in May 2020 with over 200 participants from over 70 organizations, including major consumers and providers of cloud services and technology in addition to leading advisory firms. The full <span class=\"glossaryLink cmtt_1.0 Data Management Strategy &amp; Business Case\"  title=\"Glossary: Model\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Model&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; An executable representation of an idea or theory. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/model\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>model<\/span> will be published in September 2021.<\/p>\r\n\r\n        <p>This supplementary document is intended primarily for cloud service and technology providers. It summarizes and elaborates on the key controls required by organizations, equivalent to those implemented in their on-premises environments. It also highlights opportunities to support these controls with automation. Support of the controls and automation will streamline the adoption of cloud services.<\/p>\r\n\r\n        <p><\/p>\r\n\r\n        <button class=\"opennext\">Open Scope of Controls<\/button>\r\n\r\n    <\/div>\r\n    <\/div> <!-- end panel-body -->\r\n\r\n\r\n    <div class=\"panel-heading collapsed\" data-toggle=\"collapse\" data-target=\"#cdmckc013\"><i class=\"fa fa-fw fa-minus\"><\/i>\r\n    <i class=\"fa fa-fw fa-plus\"><\/i>\r\n    <h3 class=\"upper-matter\">Scope of Controls<\/h3>\r\n    <\/div>\r\n    <div class=\"panel-body\"><!-- The inside div eliminates the 'jumping' animation. -->\r\n    <div id=\"cdmckc013\" class=\"collapse\">\r\n\r\n        <p>The framework addresses the control of data in cloud, multi-cloud and hybrid-cloud environments. Controls that address technology risks in other areas such as software development and service management are not within the scope of the document.<\/p>\r\n\r\n        <p>Many of the controls refer to being applicable to sensitive data. Each organization will have a scheme for classifying their sensitive and important data and will determine the specific classifications to which the controls must be applied. Examples of classifications that may be in scope include:<\/p>\r\n\r\n        <ul>\r\n            <li>Personal Information (PI) \/ <span class=\"glossaryLink cmtt_6.0 Data Governance\" title=\"Glossary: Sensitive Personal Data\" aria-describedby=\"tt\" data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Sensitive Personal Data&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; Personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, data concerning health or sex life, sexual orientation, genetic(...)&lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/sensitive-personal-data\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\" data-mobile-support=\"0\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">Sensitive Personal Data<\/span><\/li>\r\n            <li><span class=\"glossaryLink cmtt_3.0 Business &amp; Data Architecture\" title=\"Glossary: Personally Identifiable Information\" aria-describedby=\"tt\" data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Personally Identifiable Information (PII)&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; Any information that may be used to make a record of a person identifiable, directly or indirectly. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/personally-identifiable-information\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\" data-mobile-support=\"0\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">Personally Identifiable Information<\/span> (<span class=\"glossaryLink cmtt_3.0 Business &amp; Data Architecture\"  title=\"Glossary: Personally Identifiable Information\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Personally Identifiable Information (PII)&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; Any information that may be used to make a record of a person identifiable, directly or indirectly. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/personally-identifiable-information\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>PII<\/span>)<\/li>\r\n            <li>Client Identifiable Information<\/li>\r\n            <li>Material Non-Public Information (MNPI)<\/li>\r\n            <li>Specific Information Sensitivity Classifications (such as &lsquo;Highly Restricted&rsquo; and &lsquo;Confidential&rsquo;)<\/li>\r\n            <li>Critical Data Elements used for important business processes1 (including regulatory reporting)<\/li>\r\n            <li>Licensed data<\/li>\r\n        <\/ul>\r\n\r\n    <\/div>\r\n    <\/div> <!-- end panel-body -->\r\n\r\n\r\n    <h2>CDMC Key Controls<\/h2>\r\n    \r\n    <div class=\"cdmc-key-controls-toc\">\r\n        <ul>\r\n            <li><a href=\"#keycontrol01\">1. Data Control Compliance<\/a><\/li>\r\n            <li><a href=\"#keycontrol02\">2. Ownership Field<\/a><\/li>\r\n            <li><a href=\"#keycontrol03\">3. Authoritative Data Sources and Provisioning Points<\/a><\/li>\r\n            <li><a href=\"#keycontrol04\">4. Data Sovereignty and Cross-Border Movement<\/a><\/li>\r\n            <li><a href=\"#keycontrol05\">5. Cataloging<\/a><\/li>\r\n            <li><a href=\"#keycontrol06\">6. Classification<\/a><\/li>\r\n            <li><a href=\"#keycontrol07\">7. Entitlements and Access for Sensitive Data<\/a><\/li>\r\n            <li><a href=\"#keycontrol08\">8. Data Consumption Purpose<\/a><\/li>\r\n            <li><a href=\"#keycontrol09\">9. Security Controls<\/a><\/li>\r\n            <li><a href=\"#keycontrol10\">10. Data Protection Impact Assessments<\/a><\/li>\r\n            <li><a href=\"#keycontrol11\">11. Data Retention, Archiving and Purging<\/a><\/li>\r\n            <li><a href=\"#keycontrol12\">12. Data Quality Measurement<\/a><\/li>\r\n            <li><a href=\"#keycontrol13\">13. Cost Metrics<\/a><\/li>\r\n            <li><a href=\"#keycontrol14\">14. Data Lineage<\/a><\/li>\r\n        <\/ul>\r\n    <\/div> <!-- end cdmc-key-controls-toc -->\r\n\r\n\r\n\r\n        <a name=\"keycontrol01\"><\/a>\r\n        <table class=\"cdmc-table\">\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-control\" colspan=\"2\">Control 1: Data Control Compliance<\/td>\r\n            <\/tr>\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-left\"><p>Component<\/p><\/td>\r\n                <td class=\"cdmc-table-right cdmc-table-component-title\"><p>1.0 Governance &amp; Accountability<\/p><\/td>\r\n            <\/tr>\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-left\"><p>Capability<\/p><\/td>\r\n                <td class=\"cdmc-table-right cdmc-table-capability-title\"><p>1.1 Cloud Data Management Business Cases are Defined and Governed<\/p><\/td>\r\n            <\/tr>\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Control Description<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <p>Data Control Compliance must be monitored for all data assets containing sensitive data via metrics and automated notifications. The metrics must be calculated from the extent of implementation of the CDMC Key Controls specified in subsequent sections.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Risks Addressed<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <p>An organization does not set or achieve its value and risk mitigation goals for cloud management. Data is uncontrolled and consequently is at risk of not being fit-for-purpose, late, missing, corrupted, leaked and in contravention of data sharing and retention legislation.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Drivers \/ Requirements<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <p>Organizations are required to demonstrate adequate control of data being created in or migrated to the cloud.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Legacy \/ On-Premises Challenges<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n\r\n                    <p>Significant tranches of on-premises data do not have data management applied to them and consequently do not realize maximum value for the organization or can potentially pose an unquantified risk.<\/p>\r\n                    <p>When moving data to a new cloud environment, it is critical that organizations actively assess and apply the appropriate levels of data management to achieve their stated outcomes, apply controls to achieve this and measure compliance and value realization with those outcomes.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Automation Opportunities<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <ul>\r\n                        <li>Where evidence of the existence of controls can be gathered automatically (including those controls referenced in subsequent sections of this document), the Data Control Compliance metrics may be calculated automatically.<\/li>\r\n                        <li>Where the metrics fall below specified thresholds, alerts should be generated with automated notification to specified stakeholders.<\/li>\r\n                    <\/ul>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Benefits<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <p>Cloud data is demonstrably controlled and supports the Cloud Data management business cases and risk mitigation requirements of the organization.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Summary<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <p>Organizations can demonstrate an awareness of the intended outcomes of cloud data management and focus on quantifiable value realization and risk mitigation.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n\r\n        <\/table> <!-- end cdmc-table -->\r\n        <p class=\"cdmc-back-to-top\"><a href=\"#top\">Back to top<\/a><\/p>\r\n\r\n\r\n        <a name=\"keycontrol02\"><\/a>\r\n        <table class=\"cdmc-table\">\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-control\" colspan=\"2\">Control 2: Ownership Field<\/td>\r\n            <\/tr>\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-left\"><p>Component<\/p><\/td>\r\n                <td class=\"cdmc-table-right cdmc-table-component-title\"><p>1.0 Governance &amp; Accountability<\/p><\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\"><p>Capability<\/p><\/td>\r\n                <td class=\"cdmc-table-right cdmc-table-capability-title\"><p>1.2 Data ownership is Established for both Migrated and Cloud-generated Data<\/p><\/td>\r\n            <\/tr>\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Control Description<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                \t<p>The Ownership field in a data catalog must be populated for all sensitive data or otherwise reported to a defined workflow.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Risks Addressed<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <p>Accountability for decisions on and control of sensitive data is not defined. Sensitive data is not effectively owned and consequently is at risk of not being fit for purpose, late, missing, corrupted, leaked and in contravention of data sharing and retention legislation.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Drivers \/ Requirements<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                \t<p>Organizations have policies that require explicit ownership of data that is classified as sensitive.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Legacy \/ On-Premises Challenges<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <p>Significant amounts of legacy data do not have ownership recorded.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Automation Opportunities<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <p>The Ownership field in a data catalog must be populated &ldquo;eventually&rdquo; for sensitive data that is migrated to or generated within the cloud.<\/p>\r\n                    <ul>\r\n                        <li>Automatically trigger workflows to enforce population when new data assets are created.<\/li>\r\n                        <li>Provide the capability to automate workflows to review and update ownership periodically for sensitive data or when an owner leaves the organization or moves within the organization.<\/li>\r\n                        <li>Automatically trigger escalation workflows to address population gaps.<\/li>\r\n                        <li>Implement ownership recommendations driven by the nature of data and ownership of similar data.<\/li>\r\n                    <\/ul>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Benefits<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                \t<p>Increased compliance with data ownership <span class=\"glossaryLink cmtt_6.0 Data Governance\"  title=\"Glossary: Policy\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Policy&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; High level directive that expresses goals and represents management expectations for legal, regulatory and\/or organizational requirements. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/policy\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>policy<\/span>.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Summary<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                \t<p>Infrastructure that supports the completion of data ownership information for sensitive data drives <span class=\"glossaryLink cmtt_6.0 Data Governance\"  title=\"Glossary: Policy\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Policy&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; High level directive that expresses goals and represents management expectations for legal, regulatory and\/or organizational requirements. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/policy\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>policy<\/span> compliance.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n\r\n        <\/table> <!-- end cdmc-table -->\r\n        <p class=\"cdmc-back-to-top\"><a href=\"#top\">Back to top<\/a><\/p>\r\n\r\n\r\n        <a name=\"keycontrol03\"><\/a>\r\n        <table class=\"cdmc-table\">\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-control\" colspan=\"2\">Control 3: Authoritative Sources and provisioning points<\/td>\r\n            <\/tr>\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-left\"><p>Component<\/p><\/td>\r\n                <td class=\"cdmc-table-right cdmc-table-component-title\"><p>1.0 Governance &amp; Accountability<\/p><\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\"><p>Capability<\/p><\/td>\r\n                <td class=\"cdmc-table-right cdmc-table-capability-title\"><p>1.3 Data Sourcing and Consumption are Governed and Supported by Automation<\/p><\/td>\r\n            <\/tr>\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Control Description<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                \t<p>A register of Authoritative Data Sources and Provisioning Points must be populated for all data assets containing sensitive data or otherwise must be reported to a defined workflow.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Risks Addressed<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <p>Architectural strategy for an organization is not fully defined. Authorized sources have not been defined or suitably controlled.<\/p>\r\n                    <p>Data is duplicative and\/or contradictory, resulting in <span class=\"glossaryLink cmtt_4.0 Data &amp; Technology Architecture\"  title=\"Glossary: Process\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Process&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; A series of steps that when executed in order achieve the desired outcome. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/process\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>process<\/span> breaks, architectural inefficiencies, increased cost of ownership and accentuating existing operational risks on all dependent business processes.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Drivers \/ Requirements<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n\r\n                    <p>An important responsibility of a <span class=\"glossaryLink cmtt_2.0 Data Management Program &amp; Funding Model\"  title=\"Glossary: Data Owner\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Data Owner&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; The person with overall accountability for the meaning, content, quality and distribution of a given set of data. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/data-owner\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>data owner<\/span> is to designate the authoritative data sources and provisioning points of data for a specific scope of data.<\/p>\r\n                    <p><span class=\"glossaryLink cmtt_6.0 Data Governance\"  title=\"Glossary: Policy\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Policy&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; High level directive that expresses goals and represents management expectations for legal, regulatory and\/or organizational requirements. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/policy\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>Policy<\/span> controls require a <span class=\"glossaryLink cmtt_3.0 Business &amp; Data Architecture\"  title=\"Glossary: Data Asset\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Data Asset&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; A data asset is any collection of data owned by an organization that is considered to have intrinsic value. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/data-asset\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>data asset<\/span> to be identified as authoritative or not when it is shared.<\/p>\r\n\t\t\t\t<\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Legacy \/ On-Premises Challenges<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                \t<p>Identification and remediation of the use of non-authoritative sources or copies of data require significant manual effort.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Automation Opportunities<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <ul>\r\n                        <li>Automatically enforce the labeling of sources of data as authoritative or non-authoritative.<\/li>\r\n                        <li>Control the consumption of sensitive data from sources that are non-authoritative.<\/li>\r\n                        <li>Default the labeling of sources to non-authoritative until reviewed and updated by the <span class=\"glossaryLink cmtt_2.0 Data Management Program &amp; Funding Model\"  title=\"Glossary: Data Owner\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Data Owner&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; The person with overall accountability for the meaning, content, quality and distribution of a given set of data. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/data-owner\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>data owner<\/span>.<\/li>\r\n                    <\/ul>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Benefits<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                \t<p>Infrastructure that can run automated workflows to identify and retire non-authoritative data provides a cost savings opportunity to eliminate the manual effort involved in this work.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Summary<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                \t<p>Data assets automatically tagged as authoritative or non-authoritative will greatly simplify <span class=\"glossaryLink cmtt_6.0 Data Governance\"  title=\"Glossary: Policy\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Policy&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; High level directive that expresses goals and represents management expectations for legal, regulatory and\/or organizational requirements. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/policy\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>policy<\/span> compliance and eliminate manual costs of controlling data sourcing and consumption.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n\r\n        <\/table> <!-- end cdmc-table -->\r\n        <p class=\"cdmc-back-to-top\"><a href=\"#top\">Back to top<\/a><\/p>\r\n\r\n\r\n        <a name=\"keycontrol04\"><\/a>\r\n        <table class=\"cdmc-table\">\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-control\" colspan=\"2\">Control 4: Data Sovereignty and Cross&#8208;Border Movement<\/td>\r\n            <\/tr>\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-left\"><p>Component<\/p><\/td>\r\n                <td class=\"cdmc-table-right cdmc-table-component-title\"><p>1.0 Governance &amp; Accountability<\/p><\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\"><p>Capability<\/p><\/td>\r\n                <td class=\"cdmc-table-right cdmc-table-capability-title\"><p>1.4 Data Sovereignty and Cross-Border Data Movement are Managed<\/p><\/td>\r\n            <\/tr>\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Control Description<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <p>The Data Sovereignty and Cross-Border Movement of sensitive data must be recorded, auditable and controlled according to defined <span class=\"glossaryLink cmtt_6.0 Data Governance\"  title=\"Glossary: Policy\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Policy&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; High level directive that expresses goals and represents management expectations for legal, regulatory and\/or organizational requirements. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/policy\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>policy<\/span>.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Risks Addressed<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <p>Data can be stored, accessed and processed across multiple physical locations in cloud environments, increasing the risk of breaches to jurisdictional laws, security and privacy rules, or regulation.<\/p>\r\n                    <p>Breaches can result in various penalties, including fines, reputational damage, legal action and removal of licenses.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Drivers \/ Requirements<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n\r\n                    <p>The <span class=\"glossaryLink cmtt_2.0 Data Management Program &amp; Funding Model\"  title=\"Glossary: Data Owner\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Data Owner&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; The person with overall accountability for the meaning, content, quality and distribution of a given set of data. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/data-owner\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>data owner<\/span> should understand the jurisdictional implications of cross border data movement and any region-specific storage and usage rules for a particular <span class=\"glossaryLink cmtt_3.0 Business &amp; Data Architecture\"  title=\"Glossary: Data Set\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Data Set&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; Any organized collection of data made available for consumption. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/data-set\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>data set<\/span>. Policy-specified controls must be applied when establishing cross-border data sharing agreements to support requests to use data from a particular location.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Legacy \/ On-Premises Challenges<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <p>Maintaining data about the physical location of data stores and processes is a significant undertaking and applying rules consistently across multiple different technologies is prohibitive.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Automation Opportunities<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <ul>\r\n                        <li>Automatically capture and expose the physical location of all storage, usage and processing infrastructure applying to a cataloged <span class=\"glossaryLink cmtt_3.0 Business &amp; Data Architecture\"  title=\"Glossary: Data Set\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Data Set&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; Any organized collection of data made available for consumption. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/data-set\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>data set<\/span>.<\/li>\r\n                        <li>Provide the ability to trigger cross border <span class=\"glossaryLink cmtt_3.0 Business &amp; Data Architecture cmtt_7.0 Data Control Environment\" title=\"Glossary: Data Sharing Agreement\" aria-describedby=\"tt\" data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Data Sharing Agreement (DSA)&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; An agreement that sets out a common set of rules between the data producer and data consumer that establishes terms and restrictions of the use of consumed data. &lt;\/div&gt;&lt;div class=cmtt_synonyms_wrapper&gt;&lt;div class=cmtt_synonyms_title&gt;Synonyms: &lt;\/div&gt;&lt;div class=cmtt_synonyms&gt;Data Contract&lt;\/div&gt;&lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/data-sharing-agreement\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\" data-mobile-support=\"0\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">data sharing agreement<\/span> workflows (for international data transfer and international data requests).<\/li>\r\n                        <li>Automatically trigger regional storage, processing and usage constraints, with the ability to escalate to a <span class=\"glossaryLink cmtt_2.0 Data Management Program &amp; Funding Model\"  title=\"Glossary: Data Owner\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Data Owner&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; The person with overall accountability for the meaning, content, quality and distribution of a given set of data. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/data-owner\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>data owner<\/span> where required.<\/li>\r\n                        <li>Automatically audit and allow workflow to be triggered when sensitive data is being accessed from a location without a <span class=\"glossaryLink cmtt_3.0 Business &amp; Data Architecture cmtt_7.0 Data Control Environment\" title=\"Glossary: Data Sharing Agreement\" aria-describedby=\"tt\" data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Data Sharing Agreement (DSA)&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; An agreement that sets out a common set of rules between the data producer and data consumer that establishes terms and restrictions of the use of consumed data. &lt;\/div&gt;&lt;div class=cmtt_synonyms_wrapper&gt;&lt;div class=cmtt_synonyms_title&gt;Synonyms: &lt;\/div&gt;&lt;div class=cmtt_synonyms&gt;Data Contract&lt;\/div&gt;&lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/data-sharing-agreement\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\" data-mobile-support=\"0\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">data sharing agreement<\/span>.<\/li>\r\n                    <\/ul>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Benefits<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <p>Reducing the manual processing and audit of data sharing agreements will significantly reduce the cost and risk of data processing in the cloud.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Summary<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <p>Codifying and automatically applying jurisdictional data management rules and cross border sharing agreements will significantly reduce the risk of processing data in the cloud. This will increase the adoption of cloud services and reduce complexity in the day-to-day processing of data in the cloud.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n\r\n        <\/table> <!-- end cdmc-table -->\r\n        <p class=\"cdmc-back-to-top\"><a href=\"#top\">Back to top<\/a><\/p>\r\n\r\n\r\n        <a name=\"keycontrol05\"><\/a>\r\n        <table class=\"cdmc-table\">\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-control\" colspan=\"2\">Control 5: Cataloging<\/td>\r\n            <\/tr>\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-left\"><p>Component<\/p><\/td>\r\n                <td class=\"cdmc-table-right cdmc-table-component-title\"><p>2.0 Cataloging &amp; Classification<\/p><\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\"><p>Capability<\/p><\/td>\r\n                <td class=\"cdmc-table-right cdmc-table-capability-title\"><p>2.1 Data Catalogs are Implemented, Used, and Interoperable<\/p><\/td>\r\n            <\/tr>\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Control Description<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                \t<p><b>Cataloging<\/b> must be automated for all data at the point of creation or ingestion, with <span class=\"glossaryLink cmtt_5.0 Data Quality Management\" title=\"Glossary: Consistency\" aria-describedby=\"tt\" data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Consistency&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; (In the context of Data Management) a measurement of compliance with required formats, values or definitions. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/consistency\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\" data-mobile-support=\"0\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">consistency<\/span> across all environments.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Risks Addressed<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <p>The existence, type and context of data are not identified, resulting in the inability of all other controls to be applied that are dependent on the data scope.<\/p>\r\n                    <p>Data is uncontrolled and consequently is at risk of not being fit for purpose, late, missing, corrupted, leaked and in contravention of data sharing and retention legislation.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Drivers \/ Requirements<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                \t<p>Organizations must ensure the necessary controls are in place for large or complex workloads that involve sensitive data such as client identifiers and transactional details.<\/p>\r\n                    <p>Knowledge of all data that exists is foundational to ensuring that all sensitive data has been identified.<\/p>\r\n\t\t\t\t<\/td>\r\n            <\/tr>\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Legacy \/ On-Premises Challenges<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <p>Organizations cannot scan and catalog the significant variety of data assets that exist in legacy on-premises environments. Without comprehensive catalogs of all existing data, organizations cannot be confident that all sensitive data within their data assets have been identified.<\/p>\r\n\t\t\t\t<\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Automation Opportunities<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <ul>\r\n                        <li>Ensure that catalog entries are generated for all data migrated to or created in the cloud.<\/li>\r\n                        <li>Ensure catalog entries are generated for data in development, test and production environments and for both online and archived data.<\/li>\r\n                        <li>Generate evidence of the comprehensiveness of the data catalog.<\/li>\r\n                        <li>Implement APIs and support open data standards for <span class=\"glossaryLink cmtt_3.0 Business &amp; Data Architecture\"  title=\"Glossary: Metadata\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Metadata&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; Data that serves to provide additional information or context about other data. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/metadata\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>metadata<\/span> sharing and catalog interoperability. (Refer to the CDMC Information <span class=\"glossaryLink cmtt_1.0 Data Management Strategy &amp; Business Case\"  title=\"Glossary: Model\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Model&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; An executable representation of an idea or theory. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/model\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>Model<\/span>).<\/li>\r\n                    <\/ul>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Benefits<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                \t<p>An organization can guarantee that all data has been cataloged and can use this as the foundation on which to automate and enforce controls based on the <span class=\"glossaryLink cmtt_3.0 Business &amp; Data Architecture\"  title=\"Glossary: Metadata\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Metadata&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; Data that serves to provide additional information or context about other data. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/metadata\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>metadata<\/span> in the catalog.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Summary<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                \t<p>This is the infrastructure describing what data exists, to see how much there is and how many different types there are. It is the foundation of all the other controls.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n\r\n        <\/table> <!-- end cdmc-table -->\r\n        <p class=\"cdmc-back-to-top\"><a href=\"#top\">Back to top<\/a><\/p>\r\n\r\n\r\n        <a name=\"keycontrol06\"><\/a>\r\n        <table class=\"cdmc-table\">\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-control\" colspan=\"2\">Control 6: Classification<\/td>\r\n            <\/tr>\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-left\"><p>Component<\/p><\/td>\r\n                <td class=\"cdmc-table-right cdmc-table-component-title\"><p>2.0 Cataloging &amp; Classification<\/p><\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\"><p>Capability<\/p><\/td>\r\n                <td class=\"cdmc-table-right cdmc-table-capability-title\"><p>2.2 Data Classifications are Defined and Used<\/p><\/td>\r\n            <\/tr>\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Control Description<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <p><b>Classification<\/b> must be automated for all data at the point of creation or ingestion and must be always on.<\/p>\r\n                    <ul>\r\n                        <li><span class=\"glossaryLink cmtt_3.0 Business &amp; Data Architecture\" title=\"Glossary: Personally Identifiable Information\" aria-describedby=\"tt\" data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Personally Identifiable Information (PII)&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; Any information that may be used to make a record of a person identifiable, directly or indirectly. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/personally-identifiable-information\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\" data-mobile-support=\"0\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">Personally Identifiable Information<\/span> auto-discovery<\/li>\r\n                        <li>information sensitivity classification auto-discovery<\/li>\r\n                        <li>Material Non-Public Information (MNPI) auto-discovery<\/li>\r\n                        <li>Client identifiable information auto-discovery<\/li>\r\n                        <li>Organization-defined classification auto-discovery<\/li>\r\n                    <\/ul>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Risks Addressed<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <p>Sensitive data is not classified, resulting in the inability of all other controls to be applied that are dependent on the classification.<\/p>\r\n                    <p>Data is uncontrolled and consequently is at risk of not being fit for purpose, late, missing, corrupted, leaked and in contravention of data sharing and retention legislation.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Drivers \/ Requirements<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <p>Information sensitivity classification (ISC) is required by most organizations&rsquo; information security policies. An organization is required to know whether data is highly restricted (HR), classified (C), internal use only (IUO), or public (P), and if it is sensitive.<\/p>\r\n                    <p>Knowing whether data is sensitive is the foundation of most other controls in the framework. This requires certainty that all data has been cataloged and certainty that the sensitivity of the data has been determined.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Legacy \/ On-Premises Challenges<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <p>The variety of data assets in legacy environments impacts the ability to ensure that all data has been identified. Sensitive data may exist in data assets that have not been identified.<\/p>\r\n                    <p>Classification of data assets is often manual and can be both error-prone and expensive. Even where assets are identified, there may be gaps or errors in the classification.<\/p>\r\n                    <p>The proliferation of copies of data in legacy environments can lead to classifications in data sources not being carried through to copies of the data.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Automation Opportunities<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <ul>\r\n                        <li>Apply classification processing to all data migrated to or created in the cloud.<\/li>\r\n                        <li>Use automated <span class=\"glossaryLink cmtt_3.0 Business &amp; Data Architecture\" title=\"Glossary: Data Classification\" aria-describedby=\"tt\" data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Data Classification&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; The process of organizing data in categories for its most effective and efficient use. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/data-classification\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\" data-mobile-support=\"0\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">data classification<\/span> to identify the classification that applies.<\/li>\r\n                        <li>Support organization-specified classification schemes.<\/li>\r\n                        <li>Default classifications to the highest level until explicitly reviewed and changed.<\/li>\r\n                    <\/ul>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Benefits<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <p>The operations team that is responsible for classifying data is expensive. Auto-classification can significantly streamline and reduce the amount of manual effort required to perform this <span class=\"glossaryLink cmtt_1.0 Data Management Strategy &amp; Business Case\"  title=\"Glossary: Function\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Function&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; (In the context of Data Management) An operational function of the organization (e.g., data quality function). &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/function\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>function<\/span>.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Summary<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <p>Auto-classification of data provides confidence that all sensitive data has been identified and can be controlled.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n\r\n        <\/table> <!-- end cdmc-table -->\r\n        <p class=\"cdmc-back-to-top\"><a href=\"#top\">Back to top<\/a><\/p>\r\n\r\n\r\n        <a name=\"keycontrol07\"><\/a>\r\n        <table class=\"cdmc-table\">\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-control\" colspan=\"2\">Control 7: Entitlements and Access for Sensitive Data<\/td>\r\n            <\/tr>\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-left\"><p>Component<\/p><\/td>\r\n                <td class=\"cdmc-table-right cdmc-table-component-title\"><p>3.0 Accessibility &amp; Usage\/p&gt;<\/p><\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\"><p>Capability<\/p><\/td>\r\n                <td class=\"cdmc-table-right cdmc-table-capability-title\"><p>3.1 Data Entitlements are Managed, Enforced, and Tracked<\/p><\/td>\r\n            <\/tr>\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Control Description<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                \t<ol>\r\n                \t\t<li><b>Entitlements and Access for Sensitive Data<\/b> must default to creator and owner until explicitly and authoritatively granted.<\/li>\r\n                \t\t<li>Access must be tracked for all sensitive data.<\/li>\r\n                \t<\/ol>\r\n                <\/td>\r\n            <\/tr>\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Risks Addressed<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <p>Access to data is not sufficiently controlled to those who should be authorized. This could result in data leakage, reputational damage, regulatory censure, criminal manipulation of business processes, or data corruption.<\/p>\r\n                    <p>Data is uncontrolled and consequently is at risk of not being fit for purpose, late, missing, corrupted, leaked and in contravention of data sharing and retention legislation.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Drivers \/ Requirements<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <p>Once the auto-classifier has identified sensitive data assets, enhanced controls should be placed on those data assets, including how entitlements are granted.<\/p>\r\n                    <p>The users that have access to data and how frequently they access it needs to be tracked.<\/p>\r\n\t\t\t\t<\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Legacy \/ On-Premises Challenges<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                \t<p>It is difficult to track which data consumers are using which data assets unless tracking is turned on and is consistent across all the data in the catalog.<\/p>\r\n               \t<\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Automation Opportunities<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                \t<ul>\r\n                \t\t<li>Automate the defaulting of entitlements to restrict access to the creator and owner until explicitly and authoritatively granted to others<\/li>\r\n                \t\t<li>Automatically track which users have access to which data and how frequently they access it and store that information in a data catalog.<\/li>\r\n                        <li>Provide all data owners access to the usage tracking tool<\/li>\r\n                        <li>Hold entitlements as <span class=\"glossaryLink cmtt_3.0 Business &amp; Data Architecture\"  title=\"Glossary: Metadata\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Metadata&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; Data that serves to provide additional information or context about other data. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/metadata\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>metadata<\/span> to enable their use by any tool used to access the data.<\/li>\r\n                \t<\/ul>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Benefits<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <p>Tracking of data consumption enables consumption-based allocation of costs. Automation can reduce the cost of performing these allocations manually.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Summary<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <p><b>Entitlements and access for sensitive data<\/b> at a minimum should be automated to default to being restricted to just the creator and owner of the data until they grant permissions to other people. Once other people have access to that data, monitoring should be in place to track who is using it and how frequently they are accessing it. Costs can then be correctly allocated.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n\r\n        <\/table> <!-- end cdmc-table -->\r\n        <p class=\"cdmc-back-to-top\"><a href=\"#top\">Back to top<\/a><\/p>\r\n\r\n\r\n        <a name=\"keycontrol08\"><\/a>\r\n        <table class=\"cdmc-table\">\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-control\" colspan=\"2\">Control 8: Data Consumption Purpose<\/td>\r\n            <\/tr>\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-left\"><p>Component<\/p><\/td>\r\n                <td class=\"cdmc-table-right cdmc-table-component-title\"><p>3.0 Accessibility &amp; Usage<\/p><\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\"><p>Capability<\/p><\/td>\r\n                <td class=\"cdmc-table-right cdmc-table-capability-title\"><p>3.2 Ethical Access, Use, &amp; Outcomes of Data are Managed<\/p><\/td>\r\n            <\/tr>\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Control Description<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                \t<p><b>Data Consumption Purpose<\/b> must be provided for all data sharing agreements involving sensitive data. The purpose must specify the type of data required and include country or legal entity scope for complex international organizations.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Risks Addressed<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <p>Data is shared or used in an uncontrolled manner with the result that the producer is not aware of how it is being used and cannot ensure it is fit for the intended purpose.<\/p>\r\n                    <p>Data is not shared in compliance with the ethical, legislative, regulatory and <span class=\"glossaryLink cmtt_6.0 Data Governance\"  title=\"Glossary: Policy\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Policy&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; High level directive that expresses goals and represents management expectations for legal, regulatory and\/or organizational requirements. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/policy\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>policy<\/span> framework where the organization operates.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Drivers \/ Requirements<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                \t<p>There are emerging ethical-use frameworks and guidelines that include specifications for what should happen when the use of data changes.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Legacy \/ On-Premises Challenges<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                \t<p>It is difficult for human capabilities to recognize when the use of data has changed into a new kind of processing that could be protected under some regulatory or legal basis without specific authorization.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Automation Opportunities<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <ul>\r\n                        <li>Record data access tracking information for sensitive data.<\/li>\r\n                        <li>Enforce the capture of purpose, for example, integrated with <span class=\"glossaryLink cmtt_1.0 Data Management Strategy &amp; Business Case\"  title=\"Glossary: Model\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Model&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; An executable representation of an idea or theory. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/model\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>model<\/span> governance.<\/li>\r\n                        <li>Provide alerts to the <span class=\"glossaryLink cmtt_2.0 Data Management Program &amp; Funding Model\"  title=\"Glossary: Data Owner\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Data Owner&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; The person with overall accountability for the meaning, content, quality and distribution of a given set of data. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/data-owner\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>data owner<\/span> or data governance teams when there is an additional use case for existing user access to sensitive data.<\/li>\r\n                        <li>Recognize when specific technologies are employed (e.g., Machine Learning) and leverage usage and cost tracking to highlight potential new use cases.<\/li>\r\n                    <\/ul>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Benefits<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                \t<p>Streamlined ethical data accountability for data that is accessed for new purposes.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Summary<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <p>A <span class=\"glossaryLink cmtt_3.0 Business &amp; Data Architecture cmtt_7.0 Data Control Environment\" title=\"Glossary: Data Sharing Agreement\" aria-describedby=\"tt\" data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Data Sharing Agreement (DSA)&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; An agreement that sets out a common set of rules between the data producer and data consumer that establishes terms and restrictions of the use of consumed data. &lt;\/div&gt;&lt;div class=cmtt_synonyms_wrapper&gt;&lt;div class=cmtt_synonyms_title&gt;Synonyms: &lt;\/div&gt;&lt;div class=cmtt_synonyms&gt;Data Contract&lt;\/div&gt;&lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/data-sharing-agreement\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\" data-mobile-support=\"0\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">data sharing agreement<\/span> between a consumer and the authoritative source expresses the intent to use the data for a specific purpose. Automated tracking and monitoring of <b>data consumption purpose<\/b> can alert data owners and data governance teams when there is new or changed use.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n\r\n        <\/table> <!-- end cdmc-table -->\r\n        <p class=\"cdmc-back-to-top\"><a href=\"#top\">Back to top<\/a><\/p>\r\n\r\n\r\n        <a name=\"keycontrol09\"><\/a>\r\n        <table class=\"cdmc-table\">\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-control\" colspan=\"2\">Control 9: Security Controls<\/td>\r\n            <\/tr>\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-left\"><p>Component<\/p><\/td>\r\n                <td class=\"cdmc-table-right cdmc-table-component-title\"><p>4.0 Protection &amp; Privacy<\/p><\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\"><p>Capability<\/p><\/td>\r\n                <td class=\"cdmc-table-right cdmc-table-capability-title\"><p>4.1 Data is Secured, and Controls are Evidenced<\/p><\/td>\r\n            <\/tr>\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Control Description<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                \t<ol>\r\n                \t\t<li>Appropriate <b>Security Controls<\/b> must be enabled for sensitive data.<\/li>\r\n                \t\t<li>Security control evidence must be recorded in the data catalog for all sensitive data.<\/li>\r\n                \t<\/ol>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Risks Addressed<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <p>Data is not contained within the parameters determined by the legislative, regulatory or <span class=\"glossaryLink cmtt_6.0 Data Governance\"  title=\"Glossary: Policy\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Policy&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; High level directive that expresses goals and represents management expectations for legal, regulatory and\/or organizational requirements. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/policy\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>policy<\/span> framework where the organization operates. Data loss or breaches of privacy requirements resulting in reputational damage, regulatory fines and legal action.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Drivers \/ Requirements<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <p>The sensitivity level of the data dictates what level of encryption, obfuscation and data loss prevention should be enforced. The requirements for <b>Security Controls<\/b> and Data Loss Prevention become increasingly more stringent as the sensitivity level of the data increases.<\/p>\r\n\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Legacy \/ On-Premises Challenges<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                \t<p>It is difficult to ensure that encryption is always on for sensitive data.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Automation Opportunities<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <ul>\r\n                        <li>Provide <b>security controls<\/b> capabilities including encryption, masking, obfuscation and tokenization that are turned on automatically based on the sensitivity of a <span class=\"glossaryLink cmtt_3.0 Business &amp; Data Architecture\"  title=\"Glossary: Data Set\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Data Set&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; Any organized collection of data made available for consumption. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/data-set\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>data set<\/span>.<\/li>\r\n                        <li>Automate recording of the application of security controls.<\/li>\r\n                    <\/ul>\r\n               \t<\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Benefits<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <p>Evidence that the appropriate level of encryption is on and has been consistently applied is easy to produce.<\/p>\r\n                    <p>During a security audit, a <span class=\"glossaryLink cmtt_2.0 Data Management Program &amp; Funding Model\"  title=\"Glossary: Data Owner\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Data Owner&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; The person with overall accountability for the meaning, content, quality and distribution of a given set of data. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/data-owner\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>data owner<\/span> has a list of their data and how much of it is sensitive. Every piece of sensitive data can provide evidence that the data is encrypted, and there is a data loss prevention regime in place for all the compute environments it resides.<\/p>\r\n                    <p>Having security control evidence to deliver through the catalog rather than performing a forensic cyber review is a cost savings opportunity. A full-time team of <span class=\"glossaryLink cmtt_6.0 Data Governance\"  title=\"Glossary: Employees\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Employees&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; Employees mean current, former and prospective staff including full or part-time workers, interim or casual workers, salaried workers, consultants, contractors or temporary workers whether(...)&lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/employees\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>employees<\/span> typically handles this work.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Summary<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                \t<p>Automation that enforces and records the appropriate encryption level based on a <span class=\"glossaryLink cmtt_3.0 Business &amp; Data Architecture\"  title=\"Glossary: Data Asset\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Data Asset&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; A data asset is any collection of data owned by an organization that is considered to have intrinsic value. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/data-asset\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>data asset<\/span>&rsquo;s sensitivity level ensures security compliance and reduces manual effort to provide evidence of the controls.<\/p>\r\n               \t<\/td>\r\n            <\/tr>\r\n\r\n        <\/table> <!-- end cdmc-table -->\r\n        <p class=\"cdmc-back-to-top\"><a href=\"#top\">Back to top<\/a><\/p>\r\n\r\n\r\n        <a name=\"keycontrol10\"><\/a>\r\n        <table class=\"cdmc-table\">\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-control\" colspan=\"2\">Control 10: Data Protection Impact Assessments<\/td>\r\n            <\/tr>\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-left\"><p>Component<\/p><\/td>\r\n                <td class=\"cdmc-table-right cdmc-table-component-title\"><p>4.0 Protection &amp; Privacy<\/p><\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\"><p>Capability<\/p><\/td>\r\n                <td class=\"cdmc-table-right cdmc-table-capability-title\"><p>4.2 A Data Privacy Framework is Defined and Operational<\/p><\/td>\r\n            <\/tr>\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Control Description<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                \t<p><b>Data Protection Impact Assessments<\/b> (DPIAs) must be automatically triggered for all <span class=\"glossaryLink cmtt_6.0 Data Governance\" title=\"Glossary: Personal Data\" aria-describedby=\"tt\" data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Personal Data&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; Any information relating to a data subject. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/personal-data\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\" data-mobile-support=\"0\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">personal data<\/span> according to its jurisdiction.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Risks Addressed<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <p>Data is not secured to an appropriate level for the nature and content of that <span class=\"glossaryLink cmtt_3.0 Business &amp; Data Architecture\"  title=\"Glossary: Data Set\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Data Set&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; Any organized collection of data made available for consumption. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/data-set\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>data set<\/span>. This results in either data being secured at greater cost and inconvenience than required or data loss or breaches of privacy requirements resulting in reputational damage, regulatory fines and legal action.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Drivers \/ Requirements<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                \t<p>If a <span class=\"glossaryLink cmtt_3.0 Business &amp; Data Architecture\"  title=\"Glossary: Data Set\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Data Set&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; Any organized collection of data made available for consumption. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/data-set\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>data set<\/span> is classified as containing personal information, an organization needs to be able to demonstrate that it has performed a data protection impact assessment on it in certain jurisdictions.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Legacy \/ On-Premises Challenges<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n\t\t\t\t\t<p>It is a very expensive workflow to initiate and complete a data protection impact assessment for the data assets classified as containing personal information.<\/p>\r\n\t\t\t\t\t<p>Identifying the DPIAs that need to be performed can be challenging, and completing those DPIAs can be very expensive.<\/p>\r\n\t\t\t\t<\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Automation Opportunities<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <ul>\r\n                        <li>Automatically initiate <b>Data Protection Impact Assessments<\/b> based on factors such as the geography of the data infrastructure, classification of the data or the specified consumption purpose.<\/li>\r\n                    <\/ul>\r\n               \t<\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Benefits<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <p>Evidence that all privacy requirements have been met for sensitive data is easy to produce since DPIAs are automatically initiated.<\/p>\r\n                    <p>Cost savings opportunities arise from more efficient identification of the need for DPIAs.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Summary<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                \t<p>Automatically enforcing a <span class=\"glossaryLink cmtt_6.0 Data Governance\"  title=\"Glossary: Data Process Impact Assessment\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Data Process Impact Assessment (DPIA)&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; A DPIA is an assessment of the impact of envisaged processing operations on the protection of personal data. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/data-process-impact-assessment\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>DPIA<\/span> on data that is classified as personal ensures <span class=\"glossaryLink cmtt_6.0 Data Governance\"  title=\"Glossary: Policy\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Policy&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; High level directive that expresses goals and represents management expectations for legal, regulatory and\/or organizational requirements. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/policy\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>policy<\/span> compliance and reduces manual labor costs for that <span class=\"glossaryLink cmtt_1.0 Data Management Strategy &amp; Business Case\"  title=\"Glossary: Function\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Function&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; (In the context of Data Management) An operational function of the organization (e.g., data quality function). &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/function\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>function<\/span>.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n\r\n        <\/table> <!-- end cdmc-table -->\r\n        <p class=\"cdmc-back-to-top\"><a href=\"#top\">Back to top<\/a><\/p>\r\n\r\n\r\n        <a name=\"keycontrol11\"><\/a>\r\n        <table class=\"cdmc-table\">\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-control\" colspan=\"2\">Control 11: Data Retention, Archiving and Purching<\/td>\r\n            <\/tr>\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-left\"><p>Component<\/p><\/td>\r\n                <td class=\"cdmc-table-right cdmc-table-component-title\"><p>5.0 <span class=\"glossaryLink cmtt_7.0 Data Control Environment\" title=\"Glossary: Data Lifecycle\" aria-describedby=\"tt\" data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Data Lifecycle&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; A view of a data element as it exists in a range of stages from creation to destruction. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/data-lifecycle\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\" data-mobile-support=\"0\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">Data Lifecycle<\/span><\/p><\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\"><p>Capability<\/p><\/td>\r\n                <td class=\"cdmc-table-right cdmc-table-capability-title\"><p>5.1 The <span class=\"glossaryLink cmtt_7.0 Data Control Environment\" title=\"Glossary: Data Lifecycle\" aria-describedby=\"tt\" data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Data Lifecycle&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; A view of a data element as it exists in a range of stages from creation to destruction. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/data-lifecycle\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\" data-mobile-support=\"0\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">Data Lifecycle<\/span> is Planned and Managed<\/p><\/td>\r\n            <\/tr>\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Control Description<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                \t<p><b>Data Retention, Archiving, and Purging<\/b> must be managed according to a defined retention schedule.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Risks Addressed<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <p>Data is not removed in line with the legislative, regulatory or <span class=\"glossaryLink cmtt_6.0 Data Governance\"  title=\"Glossary: Policy\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Policy&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; High level directive that expresses goals and represents management expectations for legal, regulatory and\/or organizational requirements. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/policy\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>policy<\/span> requirements of the organization's environment, leading to increased cost of storage, reputational damage, regulatory fines, and legal action.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Drivers \/ Requirements<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <p>Organizations have a master retention schedule that determines how long data needs to be retained in each jurisdiction it was created based on its classification.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Legacy \/ On-Premises Challenges<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n\t\t\t\t\t<p>Organizations will have huge repositories of historical data, often retained to support the requirements of potential future audits. Data sets in different jurisdictions will have different retention schedules. It is difficult to comply with these requirements manually since different applicable legal requirements can modify the retention schedule.<\/p>\r\n\t\t\t\t<\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Automation Opportunities<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <ul>\r\n                        <li>Automate <b>data retention, archiving and purging<\/b> processing based on the data&rsquo;s jurisdiction, purpose and classification and according to a defined retention schedule.<\/li>\r\n                        <li>Collect and provide evidence of the data retention, archiving and purging plan and execution.<\/li>\r\n                    <\/ul>\r\n               \t<\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Benefits<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                \t<p>Automatically retaining, archiving, or purging data based on its classification and association retention schedule will reduce the manual effort required to perform this <span class=\"glossaryLink cmtt_1.0 Data Management Strategy &amp; Business Case\"  title=\"Glossary: Function\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Function&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; (In the context of Data Management) An operational function of the organization (e.g., data quality function). &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/function\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>function<\/span> and ensure <span class=\"glossaryLink cmtt_6.0 Data Governance\"  title=\"Glossary: Policy\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Policy&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; High level directive that expresses goals and represents management expectations for legal, regulatory and\/or organizational requirements. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/policy\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>policy<\/span> compliance.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Summary<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                \t<p>Organizations with this automation and control can provide the necessary evidence to verify that their data is being retained, archived or purged based on the retention schedule of its classification.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n\r\n        <\/table> <!-- end cdmc-table -->\r\n        <p class=\"cdmc-back-to-top\"><a href=\"#top\">Back to top<\/a><\/p>\r\n\r\n\r\n        <a name=\"keycontrol12\"><\/a>\r\n        <table class=\"cdmc-table\">\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-control\" colspan=\"2\">Control 12: <span class=\"glossaryLink cmtt_5.0 Data Quality Management\" title=\"Glossary: Data Quality\" aria-describedby=\"tt\" data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Data Quality&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; 1) A measurement of qualitative and quantitative conditions that determine whether the data is fit-for-purpose in a business process or operation.2) The function that ensures the data being(...)&lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/data-quality\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\" data-mobile-support=\"0\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">Data Quality<\/span> Measurement<\/td>\r\n            <\/tr>\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-left\"><p>Component<\/p><\/td>\r\n                <td class=\"cdmc-table-right cdmc-table-component-title\"><p>5.0 <span class=\"glossaryLink cmtt_7.0 Data Control Environment\" title=\"Glossary: Data Lifecycle\" aria-describedby=\"tt\" data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Data Lifecycle&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; A view of a data element as it exists in a range of stages from creation to destruction. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/data-lifecycle\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\" data-mobile-support=\"0\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">Data Lifecycle<\/span><\/p><\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\"><p>Capability<\/p><\/td>\r\n                <td class=\"cdmc-table-right cdmc-table-capability-title\"><p>5.2 <span class=\"glossaryLink cmtt_5.0 Data Quality Management\" title=\"Glossary: Data Quality\" aria-describedby=\"tt\" data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Data Quality&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; 1) A measurement of qualitative and quantitative conditions that determine whether the data is fit-for-purpose in a business process or operation.2) The function that ensures the data being(...)&lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/data-quality\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\" data-mobile-support=\"0\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">Data Quality<\/span> is Managed<\/p><\/td>\r\n            <\/tr>\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Control Description<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                \t<p><b><span class=\"glossaryLink cmtt_5.0 Data Quality Management\" title=\"Glossary: Data Quality\" aria-describedby=\"tt\" data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Data Quality&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; 1) A measurement of qualitative and quantitative conditions that determine whether the data is fit-for-purpose in a business process or operation.2) The function that ensures the data being(...)&lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/data-quality\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\" data-mobile-support=\"0\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">Data Quality<\/span> Measurement<\/b> must be enabled for sensitive data with metrics distributed when available.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Risks Addressed<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <p>Data is not consistently fit for the organization's purposes, resulting in the inability to provide expected <span class=\"glossaryLink cmtt_6.0 Data Governance\"  title=\"Glossary: Customers\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Customers&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; Current, former, and prospective individual consumers contracted to receive products or services. &lt;\/div&gt;&lt;div class=cmtt_synonyms_wrapper&gt;&lt;div class=cmtt_synonyms_title&gt;Synonyms: &lt;\/div&gt;&lt;div class=cmtt_synonyms&gt;Customer&lt;\/div&gt;&lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/customers\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>customer<\/span> service, <span class=\"glossaryLink cmtt_4.0 Data &amp; Technology Architecture\"  title=\"Glossary: Process\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Process&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; A series of steps that when executed in order achieve the desired outcome. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/process\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>process<\/span> breaks, the inability to demonstrate risk management, inefficiencies, and a lack of trust in the data and decisions based on flawed information.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Drivers \/ Requirements<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                \t<p><span class=\"glossaryLink cmtt_5.0 Data Quality Management\" title=\"Glossary: Data Quality\" aria-describedby=\"tt\" data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Data Quality&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; 1) A measurement of qualitative and quantitative conditions that determine whether the data is fit-for-purpose in a business process or operation.2) The function that ensures the data being(...)&lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/data-quality\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\" data-mobile-support=\"0\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">Data quality<\/span> metrics will enable data owners and data consumers to determine if data is fit-for-purpose. That information needs to be visible to both owners and data consumers.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Legacy \/ On-Premises Challenges<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n\t\t\t\t\t<p>The limited application of <span class=\"glossaryLink cmtt_5.0 Data Quality Management\" title=\"Glossary: Data Quality\" aria-describedby=\"tt\" data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Data Quality&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; 1) A measurement of qualitative and quantitative conditions that determine whether the data is fit-for-purpose in a business process or operation.2) The function that ensures the data being(...)&lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/data-quality\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\" data-mobile-support=\"0\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">data quality<\/span> management in many legacy environments results in a lack of transparency on the quality of data and an inability for data consumers to determine if its fit-for-purpose. Data owners may not be aware of <span class=\"glossaryLink cmtt_5.0 Data Quality Management\" title=\"Glossary: Data Quality\" aria-describedby=\"tt\" data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Data Quality&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; 1) A measurement of qualitative and quantitative conditions that determine whether the data is fit-for-purpose in a business process or operation.2) The function that ensures the data being(...)&lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/data-quality\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\" data-mobile-support=\"0\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">data quality<\/span> issues.<\/p>\r\n\t\t\t\t<\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Automation Opportunities<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <ul>\r\n                        <li>Automatically deliver <span class=\"glossaryLink cmtt_5.0 Data Quality Management\" title=\"Glossary: Data Quality\" aria-describedby=\"tt\" data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Data Quality&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; 1) A measurement of qualitative and quantitative conditions that determine whether the data is fit-for-purpose in a business process or operation.2) The function that ensures the data being(...)&lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/data-quality\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\" data-mobile-support=\"0\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">data quality<\/span> metrics to data owners and data consumers.<\/li>\r\n                        <li>Make <span class=\"glossaryLink cmtt_5.0 Data Quality Management\" title=\"Glossary: Data Quality\" aria-describedby=\"tt\" data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Data Quality&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; 1) A measurement of qualitative and quantitative conditions that determine whether the data is fit-for-purpose in a business process or operation.2) The function that ensures the data being(...)&lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/data-quality\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\" data-mobile-support=\"0\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">data quality<\/span> metrics available in the data catalog.<\/li>\r\n                        <li>Automatically alert data owners to <span class=\"glossaryLink cmtt_5.0 Data Quality Management\" title=\"Glossary: Data Quality\" aria-describedby=\"tt\" data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Data Quality&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; 1) A measurement of qualitative and quantitative conditions that determine whether the data is fit-for-purpose in a business process or operation.2) The function that ensures the data being(...)&lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/data-quality\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\" data-mobile-support=\"0\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">data quality<\/span> issues.<\/li>\r\n                    <\/ul>\r\n               \t<\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Benefits<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                \t<p>Data consumers can determine if data is fit-for-purpose. Data owners are aware of <span class=\"glossaryLink cmtt_5.0 Data Quality Management\" title=\"Glossary: Data Quality\" aria-describedby=\"tt\" data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Data Quality&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; 1) A measurement of qualitative and quantitative conditions that determine whether the data is fit-for-purpose in a business process or operation.2) The function that ensures the data being(...)&lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/data-quality\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\" data-mobile-support=\"0\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">data quality<\/span> issues and can drive their prioritization and remediation.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Summary<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                \t<p>Providing clarity on <span class=\"glossaryLink cmtt_5.0 Data Quality Management\" title=\"Glossary: Data Quality\" aria-describedby=\"tt\" data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Data Quality&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; 1) A measurement of qualitative and quantitative conditions that determine whether the data is fit-for-purpose in a business process or operation.2) The function that ensures the data being(...)&lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/data-quality\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\" data-mobile-support=\"0\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">data quality<\/span> and support to ensure data is fit-for-purpose will help data owners address <span class=\"glossaryLink cmtt_5.0 Data Quality Management\" title=\"Glossary: Data Quality\" aria-describedby=\"tt\" data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Data Quality&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; 1) A measurement of qualitative and quantitative conditions that determine whether the data is fit-for-purpose in a business process or operation.2) The function that ensures the data being(...)&lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/data-quality\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\" data-mobile-support=\"0\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">data quality<\/span> issues.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n\r\n        <\/table> <!-- end cdmc-table -->\r\n        <p class=\"cdmc-back-to-top\"><a href=\"#top\">Back to top<\/a><\/p>\r\n\r\n\r\n        <a name=\"keycontrol13\"><\/a>\r\n        <table class=\"cdmc-table\">\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-control\" colspan=\"2\">Control 13: Cost metrics<\/td>\r\n            <\/tr>\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-left\"><p>Component<\/p><\/td>\r\n                <td class=\"cdmc-table-right cdmc-table-component-title\"><p>6.0 Data &amp; Technical Architecture<\/p><\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\"><p>Capability<\/p><\/td>\r\n                <td class=\"cdmc-table-right cdmc-table-capability-title\"><p>6.1 Technical Design Principles are Established and Applied<\/p><\/td>\r\n            <\/tr>\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Control Description<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                \t<p><b>Cost Metrics<\/b> directly associated with data use, storage, and movement must be available in the catalog.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Risks Addressed<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <p>Costs are not managed, detrimentally impacting the commercial viability of the organization.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Drivers \/ Requirements<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                \t<p>As the cloud changes the cost paradigm from Capex to Opex, organizations require additional visibility on where data movement, storage and usage costs are incurred.<\/p>\r\n                    <p>Poor data architectural choices concerning data placement can incur additional costs through ingress or egress costs. For example, extra compute costs will be incurred when running data warehouse workloads on OLTP infrastructure.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Legacy \/ On-Premises Challenges<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n\t\t\t\t\t<p>Limited need to manage data processing or storage costs at a <span class=\"glossaryLink cmtt_3.0 Business &amp; Data Architecture\"  title=\"Glossary: Data Asset\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Data Asset&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; A data asset is any collection of data owned by an organization that is considered to have intrinsic value. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/data-asset\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>data asset<\/span> level.<\/p>\r\n                    <p>There is no line-item costing on the assets in a data catalog, so organizations cannot run a cost-analysis to understand where their data management costs are specifically being incurred.<\/p>\r\n\t\t\t\t<\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Automation Opportunities<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <ul>\r\n                        <li>Automatically track data assets' movement, storage, and usage costs and make this information available via the data catalog.<\/li>\r\n                        <li>Support automated policy-driven cost management and optimization of data processing.<\/li>\r\n                    <\/ul>\r\n               \t<\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Benefits<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <p>Data owners would be able to understand who is using what data, the frequency of that access and the cost incurred to provide that data.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Summary<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                \t<p>The financial operations infrastructure of cloud service providers is robust enough to identify accounts and operations that are incurring costs and associating those costs to specific data assets as line items in the data catalog.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n\r\n        <\/table> <!-- end cdmc-table -->\r\n        <p class=\"cdmc-back-to-top\"><a href=\"#top\">Back to top<\/a><\/p>\r\n\r\n\r\n        <a name=\"keycontrol14\"><\/a>\r\n        <table class=\"cdmc-table\">\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-control\" colspan=\"2\">Control 14: <span class=\"glossaryLink cmtt_3.0 Business &amp; Data Architecture\" title=\"Glossary: Data Lineage\" aria-describedby=\"tt\" data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Data Lineage&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; Documentation of the sequence of movement and\/or transformation of data as it flows between the consumer and the source(s). &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/data-lineage\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\" data-mobile-support=\"0\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">Data Lineage<\/span><\/td>\r\n            <\/tr>\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-left\"><p>Component<\/p><\/td>\r\n                <td class=\"cdmc-table-right cdmc-table-component-title\"><p>6.0 Data &amp; Technical Architecture<\/p><\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\"><p>Capability<\/p><\/td>\r\n                <td class=\"cdmc-table-right cdmc-table-capability-title\"><p>6.2 <span class=\"glossaryLink cmtt_3.0 Business &amp; Data Architecture\" title=\"Glossary: Data Provenance\" aria-describedby=\"tt\" data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Data Provenance&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; Documentation of the source of data with sufficient detail to allow reproducibility of a specific dataset. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/data-provenance\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\" data-mobile-support=\"0\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">Data Provenance<\/span> and Lineage are Understood<\/p><\/td>\r\n            <\/tr>\r\n\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Control Description<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                \t<p><b><span class=\"glossaryLink cmtt_3.0 Business &amp; Data Architecture\" title=\"Glossary: Data Lineage\" aria-describedby=\"tt\" data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Data Lineage&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; Documentation of the sequence of movement and\/or transformation of data as it flows between the consumer and the source(s). &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/data-lineage\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\" data-mobile-support=\"0\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">Data lineage<\/span><\/b> information must be available for all sensitive data. This must at a minimum include the source from which the data was ingested or in which it was created in a cloud environment.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Risks Addressed<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <p>Data cannot be determined as having originated from an authoritative source resulting in a lack of trust of the data, inability to meet regulatory requirements, and inefficiencies in the organization's system architecture.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Drivers \/ Requirements<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <p>Organizations need to trust data being used and confirm that it is being sourced in a controlled manner.<\/p>\r\n                    <p>Regulated organizations produce lineage information as evidence that the information on regulatory reports has been taken from an authoritative source for that type of data.<\/p>\r\n                    <p>Consumers of sensitive data must be able to evidence sourcing of data from an authoritative source, for example, by showing lineage from the authoritative source or providing the provenance of the data from a supplier.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Legacy \/ On-Premises Challenges<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n\t\t\t\t\t<p>Lineage information is produced manually by tracing the flow of data through systems from source to consumption. The cost of this approach and the consequences of producing incorrect data can be significant.<\/p>\r\n\t\t\t\t<\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Automation Opportunities<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                    <ul>\r\n                        <li>Record ingestion source of all data of specific classifications migrated to the cloud.<\/li>\r\n                        <li>Record source-to-target lineage of all movement of data of specific classifications within the cloud environment.<\/li>\r\n                        <li>Record destination lineage of all data of specific classifications egressing from the cloud (whether to on-premises or another cloud).<\/li>\r\n                    <\/ul>\r\n               \t<\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Benefits<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                \t<p>Easy to produce evidence of the <b><span class=\"glossaryLink cmtt_3.0 Business &amp; Data Architecture\" title=\"Glossary: Data Lineage\" aria-describedby=\"tt\" data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Data Lineage&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; Documentation of the sequence of movement and\/or transformation of data as it flows between the consumer and the source(s). &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/data-lineage\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\" data-mobile-support=\"0\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">data lineage<\/span><\/b> for regulatory reports. Major financial organizations incur significant costs producing this information manually and retrospectively.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n            <tr>\r\n                <td class=\"cdmc-table-left\">Summary<\/td>\r\n                <td class=\"cdmc-table-right\">\r\n                \t<p>Automatically tracking lineage information for data that feed regulatory reports would streamline the reports' data and eliminate cost by replacing the manual labor required to produce that information.<\/p>\r\n                <\/td>\r\n            <\/tr>\r\n\r\n        <\/table> <!-- end cdmc-table -->\r\n        <p class=\"cdmc-back-to-top\"><a href=\"#top\">Back to top<\/a><\/p>\r\n\r\n\r\n\t<\/div> <!-- end panel panel-info -->\r\n\r\n\r\n\r\n    <div class=\"panel panel-info\">\r\n\r\n    <div class=\"panel-heading collapsed\" data-toggle=\"collapse\" data-target=\"#cdmckc020\"><i class=\"fa fa-fw fa-minus\"><\/i>\r\n    <i class=\"fa fa-fw fa-plus\"><\/i>\r\n    <h3 class=\"upper-matter\">Additional Documentation<\/h3>\r\n    <\/div>\r\n    <div class=\"panel-body\"><!-- The inside div eliminates the 'jumping' animation. -->\r\n    <div id=\"cdmckc020\" class=\"collapse\">\r\n\r\n        <p>This document is a constituent part of the CDMC&trade; framework focusing on the key controls for effective management of data risk in cloud, multi-cloud and hybrid environments. This section provides a summary of additional parts of the overall framework.<\/p>\r\n\r\n        <button class=\"opennext\">Open CDMC Framework<\/button>\r\n\r\n    <\/div>\r\n    <\/div> <!-- end panel-body -->\r\n\r\n\r\n    <div class=\"panel-heading collapsed\" data-toggle=\"collapse\" data-target=\"#cdmckc021\"><i class=\"fa fa-fw fa-minus\"><\/i>\r\n    <i class=\"fa fa-fw fa-plus\"><\/i>\r\n    <h3 class=\"upper-matter\">CDMC Framework<\/h3>\r\n    <\/div>\r\n    <div class=\"panel-body\"><!-- The inside div eliminates the 'jumping' animation. -->\r\n    <div id=\"cdmckc021\" class=\"collapse\">\r\n\r\n        <p>Full documentation of the 6 components, 14 capabilities and 37 sub-capabilities of the CDMC framework, along with the 14 controls presented in this document. This 150+ page document details the objectives of each sub-capability and presents best practice advice written from both the data practitioner and cloud service and technology provider perspectives. A set of questions, artifacts and scoring guidance for each sub-capability provide the basis for organizations to perform capability assessments.<\/p>\r\n        <p>Reference: CDMC Framework Version 1.1 &ndash; published September 2021<\/p>\r\n\r\n        <button class=\"opennext\">Open CDMC Controls Testing Procedures<\/button>\r\n\r\n    <\/div>\r\n    <\/div> <!-- end panel-body -->\r\n\r\n\r\n    <div class=\"panel-heading collapsed\" data-toggle=\"collapse\" data-target=\"#cdmckc022\"><i class=\"fa fa-fw fa-minus\"><\/i>\r\n    <i class=\"fa fa-fw fa-plus\"><\/i>\r\n    <h3 class=\"upper-matter\">CDMC Controls Testing Procedures<\/h3>\r\n    <\/div>\r\n    <div class=\"panel-body\"><!-- The inside div eliminates the 'jumping' animation. -->\r\n    <div id=\"cdmckc022\" class=\"collapse\">\r\n\r\n        <p>Specifications of tests of the 14 key controls within the framework to form the basis of certification of cloud products and services against the framework.<\/p>\r\n        <p>Reference: CDMC Controls Testing Procedures V1.1 &ndash; to be published Q4 2021<\/p>\r\n\r\n        <button class=\"opennext\">Open CDMC Information <span class=\"glossaryLink cmtt_1.0 Data Management Strategy &amp; Business Case\"  title=\"Glossary: Model\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Model&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; An executable representation of an idea or theory. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/model\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>Model<\/span><\/button>\r\n\r\n    <\/div>\r\n    <\/div> <!-- end panel-body -->\r\n\r\n\r\n    <div class=\"panel-heading collapsed\" data-toggle=\"collapse\" data-target=\"#cdmckc023\"><i class=\"fa fa-fw fa-minus\"><\/i>\r\n    <i class=\"fa fa-fw fa-plus\"><\/i>\r\n    <h3 class=\"upper-matter\">CDMC Information Model<\/h3>\r\n    <\/div>\r\n    <div class=\"panel-body\"><!-- The inside div eliminates the 'jumping' animation. -->\r\n    <div id=\"cdmckc023\" class=\"collapse\">\r\n\r\n        <p>An <span class=\"glossaryLink cmtt_3.0 Business &amp; Data Architecture\"  title=\"Glossary: Ontology\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Ontology&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; A hierarchical structure of concepts or entities within a domain, organized by relationships. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/ontology\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>ontology<\/span> that draws on and combines related open frameworks and standards to describe the information required to support cloud data management. This provides a foundation for interoperability of data catalogs and automation of controls across cloud service and technology providers.<\/p>\r\n        <p>Reference: CDMC Information <span class=\"glossaryLink cmtt_1.0 Data Management Strategy &amp; Business Case\"  title=\"Glossary: Model\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Model&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; An executable representation of an idea or theory. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/model\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>Model<\/span> Version 1.1 &ndash; to be published Q4 2021<\/p>\r\n\r\n        <button class=\"opennext\">Open Data Management <span class=\"glossaryLink cmtt_3.0 Business &amp; Data Architecture\" title=\"Glossary: Business Glossary\" aria-describedby=\"tt\" data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Business Glossary&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; A collection of term names and definitions from the perspective of the business process. &lt;\/div&gt;&lt;div class=cmtt_synonyms_wrapper&gt;&lt;div class=cmtt_synonyms_title&gt;Synonyms: &lt;\/div&gt;&lt;div class=cmtt_synonyms&gt;Data Glossary&lt;\/div&gt;&lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\" data-mobile-support=\"0\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">Business Glossary<\/span><\/button>\r\n\r\n    <\/div>\r\n    <\/div> <!-- end panel-body -->\r\n\r\n\r\n    <div class=\"panel-heading collapsed\" data-toggle=\"collapse\" data-target=\"#cdmckc024\"><i class=\"fa fa-fw fa-minus\"><\/i>\r\n    <i class=\"fa fa-fw fa-plus\"><\/i>\r\n    <h3 class=\"upper-matter\">Data Management Business Glossary<\/h3>\r\n    <\/div>\r\n    <div class=\"panel-body\"><!-- The inside div eliminates the 'jumping' animation. -->\r\n    <div id=\"cdmckc024\" class=\"collapse\">\r\n\r\n        <p>A <span class=\"glossaryLink cmtt_6.0 Data Governance\"  title=\"Glossary: Standard\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Standard&lt;\/div&gt;&lt;div class=glossaryItemBody&gt; A rule or set of rules that defines expected actions for achieving compliance with associated policies. &lt;\/div&gt;&lt;div class=glossaryTooltipMoreLinkWrapper&gt;&lt;a class=glossaryTooltipMoreLink href=https:\/\/www.dcamportal.org\/glossary\/standard\/  target=_blank&gt;Term details&lt;\/a&gt;&lt;\/div&gt;\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>standard<\/span> set of over 150 data management terms, with definitions and commentary for each.<\/p>\r\n        <p>Reference: <a href=\"https:\/\/www.dcamportal.org\/glossary\/\">https:\/\/www.dcamportal.org\/glossary\/<\/a><\/p>\r\n\r\n        <button class=\"opennext\">Open Feedback and Additional Information<\/button>\r\n\r\n    <\/div>\r\n    <\/div> <!-- end panel-body -->\r\n\r\n\r\n\r\n    <div class=\"panel-heading collapsed\" data-toggle=\"collapse\" data-target=\"#cdmckc011\"><i class=\"fa fa-fw fa-minus\"><\/i>\r\n    <i class=\"fa fa-fw fa-plus\"><\/i>\r\n    <h3 class=\"upper-matter\">Feedback and Additional Information<\/h3>\r\n    <\/div>\r\n\r\n    <div class=\"panel-body\"><!-- The inside div eliminates the 'jumping' animation. -->\r\n    <div id=\"cdmckc011\" class=\"collapse\">\r\n\r\n        <p>Feedback on the document should be contributed via the Cloud Data Management Interest Community on EDMConnect: <a href=\"https:\/\/edmconnect.edmcouncil.org\/clouddatamanagementinterestcommunity\/home\" target=\"_blank\" rel=\"noopener noreferrer\">https:\/\/edmconnect.edmcouncil.org\/clouddatamanagementinterestcommunity\/home<\/a><\/p>\r\n\r\n        <p>For further information on the CDMC initiative please visit: <a href=\"https:\/\/edmcouncil.org\/page\/CDMC\" target=\"_blank\" rel=\"noopener noreferrer\">https:\/\/edmcouncil.org\/page\/CDMC<\/a>.<\/p>\r\n\r\n        <p>Any enquiries regarding EDM Council membership or CDMC Authorized Partnership should be directed to <a href=\"mailto:info@edmcouncil.org\">info@edmcouncil.org<\/a>.<\/p>\r\n\r\n    <\/div>\r\n    <\/div> <!-- end panel-body -->\r\n\r\n    <\/div> <!-- end panel panel-info -->\r\n\r\n<\/div> <!-- end knowledgebase-container -->\r\n<\/div> <!-- end edm-container -->\r\n<\/div> <!-- end full-width page-section -->\r\n\r\n\r\n\r\n\r\n<style class=\"advgb-styles-renderer\">\r\n\t.knowledgebase-home-frisbee { padding-bottom: 30px; width: 98%; max-width: 800px; }\r\n\t.knowledgebase-home-frisbee img { max-width: 800px; }\r\n    .cdmc-table { margin: 10px 0px; \/*display: table;*\/ border-top: 1px #BCBEC0 solid; }\r\n    .cdmc-table td { padding: 3px 7px; text-align: left; vertical-align: top; font-size: 17px; }\r\n    .cdmc-table:after { display: block; content: ''; clear: both; }\r\n    .cdmc-table .cdmc-table-component-title { padding: 16px 7px; font-size: 19px; background-color: #005494; }\r\n    .cdmc-table .cdmc-table-component-title p { margin: 0px; padding: 5px 0px; font-weight: bold; }\r\n    .cdmc-table .cdmc-table-capability-title { padding: 10px 7px; font-size: 17px; background-color: #DEEAF6; }\r\n    .cdmc-table .cdmc-table-capability-title p { margin: 0px; padding: 5px 0px; font-weight: bold; }\r\n    .cdmc-table .cdmc-table-left { \/*display: table-cell; width: 30%;*\/ width: 180px; color: #fff; background-color: #005494; \/*float: left;*\/ border-left: 1px #BCBEC0 solid; border-bottom: 1px #BCBEC0 solid; }\r\n    .cdmc-table .cdmc-table-right { \/*display: table-cell; width: 70%;*\/ background-color: #E5EDF5; \/*float: left;*\/ border-right: 1px #BCBEC0 solid; border-bottom: 1px #BCBEC0 solid; }\r\n    .cdmc-table .cdmc-table-control { padding: 15px 7px; color: #fff; background-color: #e78747; }\r\n    .cdmc-back-to-top { margin-bottom: 40px; }\r\n<\/style>","protected":false},"excerpt":{"rendered":"","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_bbp_topic_count":0,"_bbp_reply_count":0,"_bbp_total_topic_count":0,"_bbp_total_reply_count":0,"_bbp_voice_count":0,"_bbp_anonymous_reply_count":0,"_bbp_topic_count_hidden":0,"_bbp_reply_count_hidden":0,"_bbp_forum_subforum_count":0,"_lmt_disableupdate":"no","_lmt_disable":"","advgb_blocks_editor_width":"","advgb_blocks_columns_visual_guide":"","_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_links_to":"","_links_to_target":""},"categories":[426],"tags":[],"class_list":["post-4713","post","type-post","status-publish","format-standard","hentry","category-cdmc"],"acf":[],"modified_by":"Rob Wentz","author_meta":{"display_name":"Rob Wentz","author_link":"https:\/\/staging.dcamportal.org\/fr\/author\/admin\/"},"featured_img":null,"jetpack_featured_media_url":"","coauthors":[],"tax_additional":{"categories":{"linked":["<a href=\"https:\/\/staging.dcamportal.org\/fr\/category\/cdmc\/\" class=\"advgb-post-tax-term\">CDMC Category<\/a>"],"unlinked":["<span class=\"advgb-post-tax-term\">CDMC Category<\/span>"]}},"comment_count":"0","relative_dates":{"created":"Publi\u00e9 5 ans il y a","modified":"Mis \u00e0 jour 5 ans il y a"},"absolute_dates":{"created":"Publi\u00e9 le juin 24, 2021","modified":"Mise \u00e0 jour le octobre 14, 2021"},"absolute_dates_time":{"created":"Publi\u00e9 le juin 24, 2021 ","modified":"Mise \u00e0 jour le octobre 14, 2021 "},"featured_img_caption":"","series_order":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/pgScg5-1e1","jetpack-related-posts":[],"_links":{"self":[{"href":"https:\/\/staging.dcamportal.org\/fr\/wp-json\/wp\/v2\/posts\/4713","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/staging.dcamportal.org\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/staging.dcamportal.org\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/staging.dcamportal.org\/fr\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/staging.dcamportal.org\/fr\/wp-json\/wp\/v2\/comments?post=4713"}],"version-history":[{"count":75,"href":"https:\/\/staging.dcamportal.org\/fr\/wp-json\/wp\/v2\/posts\/4713\/revisions"}],"predecessor-version":[{"id":4824,"href":"https:\/\/staging.dcamportal.org\/fr\/wp-json\/wp\/v2\/posts\/4713\/revisions\/4824"}],"wp:attachment":[{"href":"https:\/\/staging.dcamportal.org\/fr\/wp-json\/wp\/v2\/media?parent=4713"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/staging.dcamportal.org\/fr\/wp-json\/wp\/v2\/categories?post=4713"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/staging.dcamportal.org\/fr\/wp-json\/wp\/v2\/tags?post=4713"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}