Download Master Data Governance Roles

DIVISION OF INFORMATION TECHNOLOGY
ENTERPRISE ARCHITECTURE
Master Data Governance Roles
Version 1.1
Purpose
Governance roles have been established to ensure data:
 Confidentiality & Security. Master data is protected from unauthorised persons.
 Integrity. Accurate and complete information is delivered by systems that are reliable.
 Availability. Data is accessible and useable when required for authorised use.
 Compliance. Ongoing adherence to:
 master data classification and access processes
 legislation in relation to the management and dissemination of master data
Roles & Responsibility
Data Consumer: a user or application.
 will seek authorisation to access data (if not currently approved)
 maintain compliance with terms and conditions of use as agreed with the source Data Custodian
(namely purpose, distribution, storage, user access, security). Must be able to provide evidence
of compliance on request. Shared data is read only and can only vary for this if specific
agreement is established with source Data Custodian
Data Custodian: Also known as data owner or steward.
 a data asset will have an assigned Data Custodian
 assigned Custodian must have the authority and means to manage the data asset for which they
are responsible
 responsibility to have a good understanding and management of the data asset with regards to
definition, purpose, quality, security and availability classification
 responsibility to ensure a particular data set or collections are in alignment with relevant
organisational business requirements, principles, standards, policies and any other external
legislative requirements
 responsible for maintaining the integrity of the asset data
 responsible for determining the classification level of this data using the Risk Assessment
process
 recommends what users or systems can access and for what purpose, the particular asset data
in alignment with assigned security classification level
DIT Director (responsible for Architecture): Reviews policies regarding role responsibilities and data
classification.
DIT Security Officer: Ensures operational processes occur to enable implementation of protective
measures.
Information Architect:
 ensures all approved master data has a designated custodian
 each custodian is informed of responsibilities
 availability of master data definitions catalogue
 maintains data security classification scheme
 Initiates regular review of policy, processes and current data classification matrix.
Author: Colleen Middleton
Page 1
DIVISION OF INFORMATION TECHNOLOGY
ENTERPRISE ARCHITECTURE
Integration Architect/Manager:
 implements master data access according to data classification and access approval
 governs availability of master data integration services
System Custodian/s: The owner of the system where the data is stored. Usually but not always, the
System Custodian is also the Data Custodian. If different, an agreement is to be formalised between the
Data Custodian and System Custodian for meeting the responsibilities of:
 maintaining accuracy and currency of assigned data
 determining the security classification level of the data
 consideration and advice to the users or systems seeking access to master data to ensure
alignment with business purpose and security classification
University Records Manager: source of reference for compliance with NSW State Records Act.
Further information available from http://www.csu.edu.au/division/vcoffice/oca/records-management
University Data Governance Committee:







Provide overarching governance of enterprise data management across the university’s data assets.
Oversee progress and report on improvements in enterprise data quality and compliance.
Promote the adoption of information management controls to ensure integrity, availability and
confidentiality.
Guide the development and implementation of information management policy.
Provide strategic advice to ISIP GC on proposals for improvement in the University’s information and data
assets.
Develop recommendations and initiatives aimed at improving data quality and readiness to support
insights and intelligence.
Oversee resolution of known enterprise data issues.
University Ombudsman/Privacy Officer: source for advice and compliance requirements for relevant
legislation and internal policies relating to privacy and data/information collected or managed by the
University.
Further information available from http://www.csu.edu.au/division/vcoffice/oca/university-ombudsman
Author: Colleen Middleton
Page 2