Page 62 - CITP Review

A data governance policy specifies how business activity monitoring should be executed to ensure that
organizational data is accurate, accessible, consistent, and protected. It also establishes responsibility
for information under different circumstances and outlines the procedures for its management.

A data governance policy must be flexible and adaptable in response to changing needs. An effective
data governance policy should incorporate a cross-discipline approach to information management,
along with input from executive leadership, finance, information technology (IT), and other data
stakeholders within the organization.

Architecture
Enterprise data architects must consider the full life cycle of critical enterprise data, which includes the
11
following:
 Upstream transactional/operational applications. Systems and processes that create, update, import,
or purchase data.
 Downstream analytical applications. Systems and processes that manipulate, provide, or consume
data.
 Exploding growth of off-premises sources and targets of data. These include web- or cloud-based
applications and platforms, social media, mobile devices, third-party data feeds, sensor data, and
Hadoop analytic environments.

11
See https://blogs.informatica.com/2014/01/02/the-architectural-scope-of-data-governance. Last accessed
September 10, 2019.

© 2019 Association of International Certified Professional Accountants. All rights reserved. 2-16