↓

Matière supérieure
Introduction
The requirements for data as well as for data management (DM), are interpreted through architecture des données. This interpretation defines the requirements to design the physical data consumed, produced and provisioned by the business processus. Architecture des données is a bridge between the requirements for data of the business processus and the physical execution of that data in technology infrastructure.
The efficient and effective movement of data is critical to business operations. Architecture technologique determines how data, tools and platforms operate in collaboration to satisfy business requirements. The proper alignment of these components dictates application efficiency and system processing speed. This enables organizations to control costs and achieve infrastructure scalability and elasticity which are characteristic of an organization that is designed for long-term implementation success.
The roadmaps to achieve architecture integration across business, data and technology need to be aligned on a path to the target-state. The roadmaps define the governance and controls that are needed to ensure compliance across the organization.
Définition
Le Données & Architecture technologique (TA) est un ensemble de capacités permettant d'aligner les exigences architecturales de l'entreprise, les données et la technologie dans l'ensemble de l'organisation afin de soutenir l'activité souhaitée. processus les résultats. Ces résultats comprennent les processus de gestion du changement et l'infrastructure technologique requise.
Champ d'application
- Travailler avec le bureau de gestion de projet du SM (PMO) pour concevoir et mettre en œuvre des processus et des outils durables pour l'intégration de l'entreprise et de la société civile. architecture technologique avec architecture des données.
- Garantir le DM fonction l'alignement sur les activités, les données et les architecture technologique et la stratégie.
- Veiller à ce que la gouvernance de la gestion des documents soit alignée sur les activités de gouvernance commerciale et technologique.
Proposition de valeur
Organizations that effectively deliver architecture technologique aligned to business and architecture des données get a return on investment from several areas:
- A simplified environment allows an organization to be nimble to market, agile in response to regulatory changes and faster to innovate
- Tool selection and implementation are simplified, aligned to business processus and data requirements which reduces complexity and cost
- A data storage strategy is developed consistent with the objectives of business while it controls cost and risk
- Operational risk architecture ensures the continuous flow of data to critical business functions in the event of an outage incident
Vue d'ensemble
Information architecture is the combination of architecture des données et architecture technologique. Architecture d'entreprise ou architecture des données should not dictate technology. The technology infrastructure of an organization is the responsibility of the technology fonction. However, the requirements of architecture d'entreprise et architecture des données inform technology. Architecture des données captures the information requirements of the business processus and translates them into the what, where and when of data: what data is needed; where is it to be delivered, and by when. Architecture technologique is the enabler and defines the plan and roadmap for implementation.
There are four areas of architecture technologique that are critical to a successful DM initiative.
- Database Platforms: Architecture technologique defines acceptable data platforms for entreprise use. Enterprise-class database platforms, appliance technologies, distributed computing, and in-memory solutions all need to be defined, communicated and governed by architecture technologique.
- Tools: Often one of the biggest expenses and source of inconsistent handling of data is the proliferation of multiple, disparate DM technology tools within an organization. Architecture technologique must define the allowable tool stacks – what Business Intelligence (BI) tools, extract, transform & load (ETL) tools, and various discovery tools are permitted for use within the organization.
- Storage Strategy: Architecture technologique must define how organizations will store and maintain its data. Several aspects of the target-state storage strategy are the determination of how to maintain data and control data storage. This includes decisions about the use of internal versus external cloud technology, how data will be archived and retained, and how data will be defensibly removed and destroyed from the organization’s infrastructure.
- Operational Risk Planning: A sound architecture technologique addresses operational risk, business continuity, and disaster recovery strategies. Data is the lifeblood of an organization and needs proper planning to ensure that data flows to all parts of the organization even in the face of events that interrupt business continuity.
Finally, all the above aspects of a sound architecture technologique must be supported by a strong technology governance modèle de fonctionnement integrated with the governance of business and architecture des données. Policies must be in place, agreed to by business, data and technology stakeholders, supported by executive management, and subject to internal audit scrutiny and adherence. Without integrated governance over business, data and architecture technologique, infrastructure and tools will grow independently of each other. This uncontrolled infrastructure will result in inefficiencies and security issues putting la qualité des données (DQ) and the organization at risk.
Processes, Tools, & Constructs
- Données & Architecture technologique Politique Mapping
- Business, Data & Architecture technologique Target-state
- Business, Data & Architecture technologique Execution Roadmaps
- Tool Selection Strategy
- Tool Stack Roadmap
- Storage Criteria, Strategy, & Roadmap
- Disaster Recovery Plan
- Capability Optimization
- Matrice RACI
- Processus Designs and End-to-End Processus Integration
- Procedures Guide
- Processus Performance Measurement
Questions fondamentales
- Est architecture technologique piloté par l'entreprise processus and data requirements?
- Are policies in place to integrate the governance of business, data and technology architectures?
- Are governance procedures in place to ensure adherence?
- Are design reviews in place and required to ensure enhancements and new development utilize standard business, data and architecture technologique définitions ?
- Is adherence to architecture des données standards auditable?
4.1 Technology Architecture (TA) is defined in support of the data management initiative
The Technology fonction must work in collaboration with the DM initiative. Together they define the organization-wide data platform, storage and distribution infrastructures. This collaboration must be supported by mutual governance and politique.
4.1.1 DM is engaged in the Technology vision and strategy
Description
Le rôle de la technologie fonction is to define and design the architecture needed to accommodate data requirements in collaboration with business processus requirements. The Technology fonction must work in collaboration with the DM initiative. Together they define the database strategies, analytics platform approaches, middleware solutions, storage and retention technologies, information security considerations, and all other aspects of the holistic technology infrastructure needed to support the DM goals and objectives of the organization.
Objectifs
- Design an integrated TA strategy. Obtain agreement from business, data and technology senior executive stakeholders and socialize the strategy.
- Develop the TA strategy to include the review of business objective requirements that can be supported by innovative technology tools and methods. Key among these are Machine Learning (ML) and Artificial Intelligence (AI).
- Support and enforce the integrated architecture strategy using the Internal Audit politique.
Conseil
The technology vision must ensure that the DM initiative can be supported by the Technology fonction. La technologie fonction runs the technology infrastructure. It does not define data functionality or requirements. Evaluate the TA strategy with DM objectives at the forefront.
An obligation of the architecture des données (DA) and TA functions is to evaluate the business objectives and inform the business senior executives of opportunities to deploy innovative technology tools and methods like ML/AI. The review should include opportunities to support the DM initiative objectives and processes using these tools and methods.
Questions
- What are the mechanisms to ensure a formal, ongoing partnership between the Office of Data Management (ODM) and the Technology fonction?
- Have the DA and TA functions evaluated and communicated opportunities to deploy innovative technical tools and methods in support of the defined business objectives?
Artéfacts
- TA strategy alignment with DM strategy, inclusive of the DA strategy
- Liste des parties prenantes et preuves d'une communication bidirectionnelle
Notation
Non initié
DM is not engaged in the Technology vision and strategy.
Conceptuel
DM is not engaged in the Technology vision and strategy, but the need for engagement is recognized and the development is being discussed.
Développement
The approach to engaging DM in the Technology vision and strategy is being developed.
Défini
The approach to engaging DM in the Technology vision and strategy is defined and has been validated by the directly involved stakeholders.
Atteint
DM is engaged in the Technology vision and strategy, and this is recognized by stakeholders.
Améliorée
DM engagement in the Technology vision and strategy is established.
The nature of engagement is reviewed and updated at least annually.
4.1.2 DM is engaged in the definition and development of the organization-wide platform infrastructure
Description
The DM initiative must be engaged with TA in the platform infrastructure to define and execute a strategy, an execution roadmap and a governance structure. For a technology strategy to be sustainable, it must have a budget commitment over the life of the designed roadmap.
Objectifs
- Design an integrated platform infrastructure strategy. Obtain agreement from business, data, and technology senior executive stakeholders.
- Develop an integrated platform infrastructure roadmap.
- Develop budgets and gain approval. Integrate the budget into the organization’s budget processes.
- Build and make operational an integrated platform infrastructure governance system and policies.
- Ensure that all enhancements and new developments are subject to a review and approval consistent with the defined platform infrastructure strategy and roadmap.
- Obtain the backing of Internal Audit for the platform infrastructure strategy.
Conseil
TA is accountable for the platform infrastructure strategy, the execution roadmap and. The strategy must be coordinated with business requirements for the Database Management Systems (DBMS) organization-wide. The ODM should be a facilitator, providing coordination among the stakeholders to represent these business considerations. Prioritization is critical.
Some opportunities for innovation in the organization-wide platform infrastructure involve new technology tools and methods. The infrastructure may benefit from the addition of AI, ML, Natural Language Processing (NLP), knowledge graphs and big data.
Questions
- Quels sont les mécanismes permettant d'assurer la coordination entre l'entreprise, les données et la technologie aux niveaux appropriés de l'organisation ?
- Are legal and compliance involved in these decisions?
- Are additional legal requirements considered?
- Quels sont les mécanismes de coordination et d'établissement des priorités ?
Artéfacts
- Exigences, stratégie et feuille de route relatives à l'infrastructure de la plate-forme
- Evidence of alignment with the DM strategy
- Evidence of alignment, socialization, and approval
- DBMS consideration represented in politique et des normes
- Evidence of DBMS consideration in Software Development Lifecycle (SDLC) tollgates at the onset of technology platform enhancements or new development
Notation
Non initié
DM is not engaged in organization-wide platform infrastructure matters.
Conceptuel
DM is not engaged in organization-wide platform infrastructure matters, but the need for engagement is recognized and the development is being discussed.
Développement
The approach to engaging DM in organization-wide platform infrastructure matters is being developed.
Défini
The approach to engaging DM in organization-wide platform infrastructure matters is defined and has been validated by the directly involved stakeholders.
Atteint
DM is engaged in organization-wide platform infrastructure matters, including definition, roadmap development and approval, and this is recognized by stakeholders.
Améliorée
DM engagement in organization-wide platform infrastructure matters is established.
The nature of engagement is reviewed and updated at least annually.
4.1.3 DM is engaged in the definition and development of the organization-wide data storage infrastructure
Description
The DM initiative must be engaged with TA in the data storage infrastructure to define and execute a strategy, an execution roadmap and a governance structure. For a technology strategy to be sustainable, it must have a budget commitment over the life of the designed roadmap.
Objectifs
- Design an integrated storage management strategy. Obtain agreement from business, data, and technology senior executive stakeholders.
- Develop an integrated data storage roadmap.
- Develop budgets and gain approval. Integrate the budget into the organization’s budget processes.
- Build and make operational a storage management infrastructure governance system and policies.
- Ensure that all enhancements and new developments are subject to a review and approval consistent with the defined storage management strategy and roadmap
- Obtain the backing of Internal Audit for the storage management strategy.
Conseil
Data storage management strategy, execution roadmap and governance are each a TA fonction. The strategy must be coordinated with business requirements for areas like archiving capability, legal and compliance considerations, retention and defensible destruction of data. It is important to extend the storage strategy to incorporate sandbox environments. The ODM should be a facilitator, providing coordination among the stakeholders to represent these business considerations. Additionally, data storage, archive, and retrieval plans must be coordinated across the various stakeholders (business, data, technology, legal, and compliance). Prioritization is critical.
Some opportunities for innovation in the organization-wide data storage infrastructure involve new technology tools and methods. Consider the roles Hadoop, cloud and on-prem/off-prem-Data might play in building new infrastructure. There are also, new opportunities for data to be encrypted, tokenized, anonymized, or pseudonymized at rest, in transit and in storage.
Questions
- Quels sont les mécanismes permettant d'assurer la coordination entre l'entreprise, les données et la technologie aux niveaux appropriés de l'organisation ?
- Are legal and compliance involved in these decisions?
- Are additional legal requirements considered in the strategy including but not limited to masking, anonymization, and the full complement of personal privacy rights?
- Quelle est l'appétence de l'organisation pour les services de stockage de données en nuage ?
- Comment l'organisation va-t-elle gérer la reconstruction des données à partir d'une archive ?
- Quels sont les mécanismes de coordination et d'établissement des priorités ?
Artéfacts
- Exigences, stratégie et feuille de route en matière de stockage
- Evidence of alignment with the DM strategy
- Evidence of alignment, socialization, and approval
- Storage consideration represented in politique et des normes
- Preuve de la prise en compte du stockage dans les étapes du cycle de développement durable dès le début des améliorations de la plate-forme technologique ou des nouveaux développements.
Notation
Non initié
DM is not engaged in organization-wide data storage infrastructure matters.
Conceptuel
DM is not engaged in organization-wide data storage infrastructure matters, but the need for engagement is recognized and the development is being discussed.
Développement
The approach to engaging DM in organization-wide data storage infrastructure matters is being developed.
Défini
The approach to engaging DM in organization-wide data storage infrastructure matters is defined and has been validated by the directly involved stakeholders.
Atteint
DM is engaged in organization-wide data storage infrastructure matters, including definition, roadmap development and approval, and this is recognized by stakeholders.
Améliorée
DM engagement in organization-wide data storage infrastructure matters is established.
The nature of engagement is reviewed and updated at least annually.
4.1.4 DM is engaged in the definition and development of the organization-wide data distribution infrastructure
Description
The DM initiative must be engaged with TA in the data distribution infrastructure to define and execute a strategy, an execution roadmap and a governance structure. For a technology strategy to be sustainable, it must have a budget commitment over the life of the designed roadmap.
Objectifs
- Design an integrated data distribution strategy. Obtain agreement from business, data, and technology senior executive stakeholders.
- Develop a data distribution infrastructure roadmap.
- Develop budgets and gain approval. Integrate the budget into the organization’s budget processes.
- Build and make operational a data distribution infrastructure governance system and policies.
- Ensure that all enhancements and new developments are subject to a review and approval consistent with the defined data distribution strategy and roadmap.
- Obtain the backing of Internal Audit for the data distribution strategy.
Conseil
TA is accountable for a data distribution infrastructure strategy, execution roadmap and governance structure. The strategy must be coordinated with business requirements for areas like data access controls, information security restrictions, authorized data provisioning points and data as a service (DaaS). The ODM should be a facilitator – providing coordination among the stakeholders to represent these business considerations. Prioritization is critical.
Some opportunities for innovation in the organization-wide data distribution involve new technology tools and methods. Consider the roles DaaS–API/Technology; web-based access; macros for power users and various BI tools might play in building new infrastructure.
Questions
- Quels sont les mécanismes permettant d'assurer la coordination entre l'entreprise, les données et la technologie aux niveaux appropriés de l'organisation ?
- Are legal and compliance involved in these decisions?
- What is the organization’s appetite for data distribution as a service?
- Quels sont les mécanismes de coordination et d'établissement des priorités ?
Artéfacts
- Exigences, stratégie et feuille de route relatives à l'infrastructure de la plate-forme
- Evidence of alignment with the DM strategy
- Evidence of alignment, socialization, and approval
- Data distribution infrastructure represented in politique et des normes
- Evidence of data distribution infrastructure consideration in SDLC tollgates at the onset of technology platform enhancements or new development
Notation
Non initié
DM is not engaged in organization-wide data distribution infrastructure matters.
Conceptuel
DM is not engaged in organization-wide data distribution infrastructure matters, but the need for engagement is recognized and the development is being discussed.
Développement
The approach to engaging DM in organization-wide data distribution infrastructure matters is being developed.
Défini
The approach to engaging DM in organization-wide data distribution infrastructure matters is defined and has been validated by the directly involved stakeholders.
Atteint
DM is engaged in organization-wide data distribution infrastructure matters, including definition, roadmap development and approval, and this is recognized by stakeholders.
Améliorée
DM engagement in organization-wide data distribution infrastructure matters is established.
The nature of engagement is reviewed and updated at least annually.
4.1.5 DM governance is aligned with TA governance
Description
The DM governance must be engaged with TA governance to align with the overall technology vision and strategy along with the specific strategies for organization-wide platform, data storage and data distribution infrastructures. Alignment to TA governance processes may include design reviews, permit to build, permit to use and permit to send approvals.
Objectifs
- Develop an integrated governance structure and policies in alignment with the TA and DA strategies.
- Ensure all technology development meets the TA politique requirement to follow DA politique et des normes.
- Submit all enhancements and new developments for architectural platform design review and approval.
Conseil
Technology governance is the responsibility of the technology groupe. Because of the close relationship between the DM initiative and technology implementation, it is imperative that the DM fonction collaborate with the technology groupe. Ensemble, ils créent, soutiennent et appliquent la technologie politique and standards that impact the DM initiative.
This collaboration with technology is designed to ensure alignment with business processes, compliance with data restrictions and harmonization with both technical and architectural standards. This will include design reviews to ensure that technology implementation follows DA politique and standards and that toll gates are in place to review the technical implementation.
TA governance guarantees adherence to declared platform and tool standards. The objective is to ensure that existing TA governance policies reflect the goals of the DM initiative.
The emerging AI and ML tools also have potential application to enhancing the DM processes and should be considered in the overall DM technology tool stack planning.
Questions
- Is TA governance aligned with DA governance?
- Is DA involved in the technical design review processus?
- Les autorisations de créer, d'utiliser et d'envoyer des données sont-elles en place ?
- Les services juridiques et de conformité sont-ils impliqués dans cet effort ?
- Is TA politique aligned with the DM strategy?
Artéfacts
- Preuves de la collaboration en matière de gouvernance, telles que partie prenante meeting agendas and results, escalation procedures
- Evidence of toll gate review processus, par exemple, les procès-verbaux et les résultats des réunions
- TA politique and DA politique reference the other without duplication
- Liste des parties prenantes et preuves d'une communication bidirectionnelle sur l'examen technique et les autorisations
Notation
Non initié
DM governance is not aligned with TA governance.
Conceptuel
DM governance is not aligned with TA governance, but the need for alignment is recognized and the development is being discussed.
Développement
Aligned DM governance and TA governance is being developed.
Défini
Aligned DM governance and TA governance is defined and validated by directly involved stakeholders.
Atteint
Aligned DM governance and TA governance is established, recognized and used by stakeholders.
Améliorée
Aligned DM governance and TA governance is are established as part of business-as-usual practice with a continuous improvement routine.
4.2 DM Technology Tool Stack is Identified and Governed
The DM business processus must define requirements for the DM technology tool stack. Execution roadmaps and governance ensure the tools are adopted.
4.2.1 DM technology tool selection strategy is defined and verified by stakeholder
Description
The DM initiative is just like any other business processus. Technology requirements must be defined by the DM business processus and the requirements for data from the business processus. The DM executive is accountable for the requirements for technology and technology is responsible for a DM technology strategy that delivers against those requirements.
Objectifs
- Design an integrated DM technology tool strategy. Obtain agreement on the strategy from business, data and technology senior executive stakeholders. Socialize the DM technology tool strategy.
- Demonstrate support for the DM technology tool strategy by corporate politique. Engage with Internal Audit for enforcement.
Conseil
Ensure that there is a defined DM technology tool selection strategy and that it is aligned with the DM initiative. The ODM must ensure that the DM initiative can support the use of various tools (i.e., modeling, ETL, métadonnées, glossary, DQ, analytics). This support capability requires coordination between business, data, and technology stakeholders to define the DM initiative business processus and data requirements for the DM tool selection.
Questions
- What are the mechanisms for coordination between the technology tool selection processus and DM?
- Are the policies, procedures, and processes that govern this relationship defined and verified?
Artéfacts
- Tool selection strategy document
- Liste des parties prenantes et preuves d'une communication bidirectionnelle
Notation
Non initié
There is no DM technology tool selection strategy.
Conceptuel
There is no DM technology tool selection strategy, but the need is recognized and the development is being discussed.
Développement
The DM technology tool selection strategy is being developed.
Défini
The DM technology tool selection strategy is defined and validated by directly involved stakeholders.
Atteint
The DM technology tool selection strategy is established, recognized and followed by stakeholders.
Améliorée
The DM technology tool selection strategy is established as part of business-as-usual practice with a continuous improvement routine.
The strategy is reviewed and updated at least annually.
4.2.2 Technology tool roadmap is developed and implemented
Description
A technology tool roadmap must be developed to execute the DM technology infrastructure defined in the tool selection strategy.
Objectifs
- Élaborer une feuille de route intégrée pour les outils technologiques, conformément à la stratégie en la matière. Inclure des lignes directrices pour les nouveaux développements ainsi que des plans de démantèlement pour les mises en œuvre d'outils patrimoniaux non normalisés.
- Develop budgets aligned to the organization’s budget cycle processes. Move the budget through the processus to approval.
Conseil
Once the tool selection strategy is defined, it needs to be converted into an actionable implementation roadmap. Make sure the technology roadmap is practical, aligned to business priorities and harmonized with internal procurement processes.
Questions
- Is the DM technology tool roadmap aligned with internal procurement processes?
- Is the DM technology tool roadmap shared with the ODM?
Artéfacts
- Technology tool roadmap document
- Evidence of alignment with the DM strategy
- Documented approvals
Notation
Non initié
There is no technology tool roadmap.
Conceptuel
There is no technology tool roadmap, but the need is recognized and the development is being discussed.
Développement
The technology tool roadmap is being developed.
Défini
The technology tool roadmap is defined and validated by directly involved stakeholders.
Atteint
The technology tool roadmap is established, recognized and followed by stakeholders.
Améliorée
The technology tool roadmap is established as part of business-as-usual practice with a continuous improvement routine.
The roadmap is reviewed and updated at least annually.
4.2.3 DM technology tool governance is integrated into Data Governance (DG)
Description
Technology, in partnership with the DM initiative, must define and govern the DM related technology stack. Data tools include but are not limited to data discovery tools, DQ tools, profilage des données des outils, métadonnées tools, lineage tools, BI tools and data governance tools.
Objectifs
- Put in place an operational, integrated technology tool governance structure with a complete set of associated policies. Confirm that the structure is in alignment with the DM strategy.
- Get a review and approval of all enhancements and new development projects to ensure alignment with technology tool selection. Technology governs the permissible technology stack for related data tools.
- Implement data tool governance structure and complete operational roll-out across all technology development teams.
Conseil
Ensure the governance structure for DM technology tools is in place and operational, and that the governance policies and practices incorporate the DM initiative requirements. Different tools that perform the same functions can produce disparate data. Beyond this, the proliferation of tools can increase complexity, add cost and inhibit systems integration. However, the business needs the flexibility to acquire the best tools for their objectives. The challenge is, the ODM must manage the disparate data.
Questions
- What are the mechanisms for coordination between the technology tool selection governance, and DM?
- How is the organization working with innovation teams to keep abreast of new technology capabilities?
- Is there a mechanism for collaboration between DM and data tool selection?
- Existe-t-il un accord entre la technologie et l'entreprise concernant la portée et les contrôles associés aux outils technologiques ?
Artéfacts
- Document sur la structure de gouvernance des outils technologiques
- Evidence of governance operation such as meetings and procedures, documents
- Politique et standards for data tool governance which are documented and verified
- List of authorized tools
- Bi-directional communication between business, data and technology on tool selection and criteria for approval
Notation
Non initié
DM technology tool governance is not integrated into DG.
Conceptuel
DM technology tool governance is not integrated into DG, but the need is recognized and the development is being discussed.
Développement
The approach to integrating DM technology tool governance into DG is being developed.
Défini
The approach to integrating DM technology tool governance into DG is defined and validated by directly involved stakeholders.
Atteint
DM technology tool governance is integrated into DG, and this is recognized by stakeholders.
Améliorée
DM technology tool governance integration into DG is established.
The nature of the integration is reviewed and updated at least annually.
4.3 Operational Risk Planning is in Place
The DM governance structure must be in alignment with operational risk governance and engaged in the contingency planning and testing for data access and maintenance in the event of an operational disruption.
4.3.1 Operational risk governance structure and processes are in place and implemented
Description
The DM initiative governance structure must be in alignment with operational risk governance. The data politique must align with the operational risk politique without creating duplication in the policies.
Objectifs
- Develop an integrated operational risk governance structure and policies and make them operational.
- Approve operational risk plans for all enhancements and new development through project tollgates.
- Bring Internal Audit in to approve the operational risk planning.
Conseil
Operational risk routines such as disaster recovery, Business Continuity Planning, cyber-threats, degrees of interconnectedness, testing and dependency planning must be formalized for all data systems. Changes to existing systems and new development must be evaluated against the operational risk guidelines. Operational risk will also be driven by regulation. Governance oversight should ensure compliance in advance of an internal audit or regulatory examinations.
Questions
- Is operational risk governance formalized and aligned with the organization’s risk and escalation plans?
- Is operational risk governance aligned with the DM governance mechanisms?
Artéfacts
- Disaster recovery governance mechanisms
- Evidence of disaster recovery planning collaboration with compliance
Notation
Non initié
There are no operational risk governance structure and processes.
Conceptuel
There are no operational risk governance structure and processes, but the need is recognized and the development is being discussed.
Développement
Operational risk governance structure and processes are being developed.
Défini
Operational risk governance structure and processes are defined and validated by directly involved stakeholders.
Atteint
Operational risk governance structure and processes are established and are recognized and followed by stakeholders.
Améliorée
Operational risk governance structure and processes are established as part of business-as-usual practice with a continuous improvement routine.
Processes are reviewed and updated at least annually.
4.3.2 Data infrastructure contingency planning is defined and in place
Description
The DM initiative, while not directly accountable, must be engaged in the contingency planning and testing for data access and maintenance in the event of an operational disruption.
Objectifs
- Develop an integrated technology operational risk management strategy. Obtain agreement from business, data, and technology senior executive stakeholders.
- Engage Internal Audit to review and support the integrated technology operational risk management strategy.
Conseil
Operational risk requirements for data must be considered early in the SDLC. These requirements will define the architecture des données’s choice of data storage applications and data recovery strategies. When evaluating a data storage application, keep in mind applications may hold data from multiple data domains. The most stringent data recovery requirements might be applied to all data in the application. The more stringent data recovery has a higher cost so this may inflate storage cost for all the data.
Questions
- What are the mechanisms to ensure collaboration between DM and operational risk contingency planning?
- Toutes les dépendances des données sont-elles définies et comprises pour la récupération ?
Artéfacts
- Disaster Recovery Plan
- Tests and results of Disaster Recovery Plan
Notation
Non initié
Il n'existe pas de plan d'urgence pour l'infrastructure de données.
Conceptuel
There is no data infrastructure contingency planning, but the need is recognized and the development is being discussed.
Développement
Un plan d'urgence pour l'infrastructure des données est en cours d'élaboration.
Défini
Le plan d'urgence de l'infrastructure de données est défini et validé par les parties prenantes directement concernées.
Atteint
Un plan d'urgence pour l'infrastructure de données est établi, reconnu et suivi par les parties prenantes.
Améliorée
Data infrastructure contingency planning is established as part of business-as-usual practice with a continuous improvement routine.
Data infrastructure contingency planning is tested, reviewed and updated at least annually.