.

I;:I I~t:
., ."

.. . t ....... ..

t ... . . .

::: :

ro.o.

i~gg
~~:" ::

..

gg g: :::
::l::: ;:~~g
~t
:::: 2:: :t: :i!.:!: ~:ii.! !; ::::::: :.,
~

:,~: i

~ :: ::

I "

, .

. . ... .

';:~~ ; ; li ~ ~g~~::::::::
n~ ~~~~~: :.
:::1.:
! ' :::. :::: : ::

~mmHmm~~l~mi~!b:
...................... -... ..

tiifi1lrmim~~i ;;

;::~~j~:[1mimillM1n~1~:

:: ::
!::.::::::ao:
....................
~: ::;::::::::::::-:::
::
..::... ......
.................
""......... .
.... ...............
.................
..
.....
, ........ .
....................
..............
.
.....-........
..... ............
............
::. ........
:::-::::-::-:
..
: :~:

::

::::: ::::~::,:!:

t o

.. .

. .... ,

_ .-.. ~. __ . . . .

'

.. ..... .

... .... . . .. ... ... ..... " ..

..!:::;::::;~ ;; :::::;:
~

............

................... . . . .
.... ............
....
.............
.. ... .
..... ..
............ ..... .......
.............
..... .. ......
.
..-..... .
... ........
..
..'". .........
.
.
...
..
.. .....
.
.......
.... .........
.. ... ......
. ... .....

=O .~

j.-' .......
.......
............,.. ....
... . .
_..... . .... .. . . ............
.
~

o _

o o

Of

_ a :::::::::'
:: ;~ : i:~ '

.... .

..... .... .

.. ;;::::: ;-:::=;: : : : : :::; ::~; ... .

... ;+:::t::-rr:nitn-! :':--:; ;.:-: ~:: :! : :'::: :: :':::; ...

.:-=: : :~ ; ::: :: :::::: : ; ;:-;!::rt::::;!!!::!:-~::::!_:-!:~ .

:: :i~~: ~t iit::t:'f::-:Hg:
.....:;::;::::::::::;:::::::::::;:;:
..
...:: ...........
;;rtt::jl"' .....
.::tti.
:::: :~: : : : : . . .m ... ..1:*

. .: :::: : :: =:::! :.: tt~-l-ftr :.'Ul ..!:

..:;~ ~~ ~ ~ ~ ~ ~~: ~ n1!!: n:.:!~;t~

Data Management
Data Governance Plan

::::: : ::::::: ~- H:~- :::::::

: : :::::::::::: ;~-:!!::: !

::-::::::
........................

: :: :::: ! :: :: = : ~

:::::::
:::::::;ii::::!
......................
;. ..;;:. ........
: :: ::.....::::;
. ...;::n::
. ... "....
~

g~ggggg; iiiii:

The Overall management of the availability, usability,

integrity, and security of the data w ithin

: :: t~:~5w. ti

::::I :: : -.::::~............
:::: ::::::: :::-:
.-

:::::::: :: :::: ;:

.. .:-::
,

'"~

:~ ~;; ~ ~~ ~ ~Eg g~:i-!!t!

.::::::::::::::::i!m
.. .. .. ..... . .... .. S:
. . 1..1

7/19/2012

::::::::::::.::::
. '-Z::::-:
..::........
... ... .. ,!lll!i
...
: :::::: : : :: :: : :: :: :~mn.;.u:U

. ..............
....tr!~ig
.......
...... .
ig !~ ~ g
.,

. . : :: :: : ::: ! : :::: : :: : : ; ~. :to !!:;~i!

!: :::: ::::::-::: ! : : : ~::: : H- .: nn.
:: ::: : :: : :::: : ::~: :~:~
tn"'

"

..............
.....,............
........
..............
~ .;

':-: ::::-::: l:
:l~: :::: :

;; g~ ~~ ~ ~

: :::: :

: : : ::: : : : ::-: :--- -it.,

. ' ... 0 .

.. .

. .. . . . .

;I;

. . . . :

g H~~ ~ ~ ~g;H~~-~trn::{l: ~~:.:i1I;

::
:: :::: : :::
. *.........
.... :::
~. ..

: :~: :: :::: :::;::::::: :::-::::::

........................
... 01 ... ... .

:: :::: ::,: ::::-: : ::::': :::::::: :::::::-: ::: ::::::

~ .........
~lit~ ;.gggg~~;~g~~~~g
g;ggg
.........
. ....... . .... .. .....
. ......
".. .. .... . . . . .
..;:~." ~;~~g........... .....
. .............
_.............
~

;:.,~;:: :1
::::::'-::::
::::::;:::

::;:.

: ::::~ : ::;

........

~ ~

.. . .,

:::: ::

Data Management Data Governance Plan

Executive Summary
Data Management is the exercise of guidance over the management of data assets and the performance
of data functions. Data governance refers to the overall management of the availability, usability,
integrity, and security of the data employed in an enterprise. A sound data governance program
includes a governing body, a defined set of procedures, and a plan to execute those procedures. In
practical terms, that means putting personnel, policies, procedures, and organizational structures in
place to make data accurate, consistent, secure, and available to accomplish
Effective data governance makes

mission.

more efficient by saving money, allowing re-use of data, and

supporting high quality data analysis. However, data governance requires more than just a few
members of

staff with a project plan. It requires participation and commitment of both

and Business management, as well as senior level executive support. The data governance program
enables

to effectively manage data assets due to aSSigned responsibilities and rules of the

engagement.
Communication is very important for successful data governance. To succeed in a data governance
program, management bodies and implementation team(s) must tell stakeholders what steps are being
taken and why, must inform all relevant communities of interest about how data governance will
benefit them, and must listen to stakeholders and communities of interest to incorporate their ideas
and feedback into the data governance program. Input and feedback makes governance efforts more
effective in achieving mission critical goals and is vital for successful data governance.

, , "

O' ~

,.

'iffiij'
..... ..

~!!
. ... ' .
U
::::::;:::~! .::: : ::. !: :!,
:::: :::.::!::::
:::!
::
:::::
: ~ th1n:
..... .. . . .. ........ .. . .. I"
:::::::;::
.. ... ..... . . :;:
... . ::::: L.
::':::~:U.;u ~

un

..

~. .... .. .........

............
......
. .. :::::
:::: :r::
...
.................
."
....
........
.... ... .,
:: ::'" !::
.
g~;
~;ml:.~
j,
~:~~F
:::: :;'::
I

.. . . . . . . . . . . .

..... , .

"

"

Data Management Data Governance Plan

I::~.

'

'

'

............ ...........
.
f; .

::; ~-::! !:~;, ::::~::::,

......
~. "'

--;~.:~~ ~:~~:; ~~

Understanding Data Governance

What is Data Governance?

Data governance is a component of data management that can be defined in several ways. The CIO
Magazine say "Management is the decisions you make, governance is the structure for making them"
On source defined it as "Data governance refers to the organizational bodies, rules, decision rights, and
accountabilities of people and information systems as they perform [data] information-related
processes".
Depending on their specific needs, different organizations will choose different management structures
to implement data governance. It is less important to follow a particular organization chart than it is to
ensure that data governance management makes data :

Reliable

Consistent

Complete

Easily available to those with a legitimate need for it

Unavailable to those without a legitimate need or authorization for it

These goals should guide ODAC in planning and managing a data governance program.

What Data Governance Isn't

Understanding what data governance is not can help focus on what it is. In particular, data governance
is not:

Change Management

Data cleansing or ETL'ing (Extract, Transform, and Load)

Data Warehousing

Database design

Data governance applies to each of these disciplines but is not included in any of them.

Why Data Governance is needed

As a component of data management, data governance provides and enforces data standards, common
vocabulary, reports, and the development and the use of standardized data. It would enables ODAC to
more easily integrate, synchronize, and consolidate data from internal repositories, exchange data with

:::!
:H-;:H~:~~: n1:; :.:
'.
:::::~::
:.:: ::::::..
, ...............
....

"' . . . -. . . . j .. -jo;~

..

:'4

:::::l:::::::
:::1: :::::::'

Data Management Data Governance Plan

-: ',;
~f

l'

'o-rganizations in a common format, and communicates effectively through shared terms and
report formats.
The benefits of data governance include standardization for data and systems, the ability to make use
of merged data for additional knowledge discovery, and increased leverage when dealing with external
data suppliers.

Measurable goals
Measurable goals are essential to monitor the effectiveness of the data governance program, just as
they are essential in other areas of management. Some authorities see measurable goals as part of the
definition of data governance.
Setting measurable goals is not enough. ODAC must choose the right goals to measure. Anything an
organization measures will tend to improve - sometimes, at the expense of other things that the
organization does not measure. For example, if a manufacturing plant measures how many parts
workers produce per minute but pays no attention to defects or worker attrition, it will get an increase
in all three factors - one of them desirable and two undesirable.
Defining and using measurable goals requires applying the more general discipline of business
performance management (BMP) to data governance.
Two key steps can help identify the right goals to measure:

Identify and define "value metrics" linked to the goals of data governance, such as increased
data reliability and consistency such as the number of approved standardized data elements in
the XML Registry and Repository.

Identify and define additional "analysis metrics" linked to the process of data governance and to
possible negative side-effects of monitoring the value metrics. For instance, how many projects
that create XML schema conform to standards

Planning
ODAC should perform data governance planning at three levels:

Executive level sets the overall mission and strategic goals of data governance. It also obtains
needed funding and resources.

Strategic level develops the high level task plan to achieve the strategic goals mandated by the
Executive level.

Tactical level develops short terms goals and tasks to implement the high level plan mandated
by the Strategic level.

Data Management Data Governance Plan

Expertise
At the top level, members of the Executive level will provide global understanding of the needs and
issues faced by ODAC. Members of the Strategic level will incorporate that global understanding into a
slightly lower level strategic plan for data governance in specific operational areas.
who chairs the Tactical level, will provide expertise to
identify general issues of data governance that the effort needs to address, such as data
standardization. This individual will also help identify the metadata that needs to be collected for data
governance.
Staff members who are experts in specific data domains in ODAC participate in the Tactical level. These
individual know their data domains and the business processes that use their data. As such, they will
identify how prospective changes in their data will affect business processes in ODAC. They will also
assess and help to improve data quality in their areas and will present recommendations for identified
quality issues.

Integration tools
ODAC is in the process of research and tool evaluation to acquire a tool suite supporting the overall data
management effort.

Willingness to change
As with all new standards, senior management should support and comply with data governance efforts .
Data governance is a service that will deliver higher data quality, as well as consistent data user across
the branch. It will enable ODAC to improve analytics and empower management in making educated
business decisions.
The being said, change, even beneficial change, is always uncomfortable. We all know how to do things
the way we've been doing them: for a long time, those old ways have seemed to be "good enough".
However, changes are required to make the section and/or branch better. A slow, stepwise approach to
change will help. Most important is the willingness of those involved - both in data governance
management and in its communities of interest - to listen to each other and work collaboratively to
achieve the best result for everyone.

Data Management Data Governance Plan

'lGi..... nt:l'ti"'n

of Data Governance

Data governance is a vital keystone in the process of building better data management.
The

team will work with

senior management to introduce data governance

to ODAC. The team will work closely with stakeholders, whose feedback and comments (both positive
and negative) will help improve policies and procedures to better serve the needs of
Data governance implementation includes various tasks, such as Master Data Management (MDM) and
Data Stewardship. MDM supports the integration of Data Governance and Data Quality Control. Data
governance management bodies will share responsibility for such tasks with EDM

Functions and Infrastructure

Functional and Organizational infrastructure will be created by establishing EDM as a function with
EDM is empowered to execute data management tasks and establish different support functions
that they require.

Technical Infrastructure
Data governance will support

as it successfully and effectively deploys new technology and

architecture principles such as Service-Oriented Architecture (SOA), Data Integrated Services (DIS
Policies and Procedures
The Enterprise Data Management Data Governance and Metadata Manager
The Metadata repository
The Data Quality Aspect of Data Governance
The Data Governance Activity Matrix

-.

--."'-

Data Management Data Governance Plan

The Management of Data Governance

Overview
Business stakeholders Involvement
Executive Data Governance Council
Strategic Data Governance Steering Committee
Tactical Data Governance Work Group
Enterprise Change Control Board
Specific Roles - Data Stewards

The Process of Data Governance

.-

-- --

.t,..i
00' 1fiffmmmt
,.
. ..........: .. . '

uell~: ::::::::::::~::::. :~:jfu

" "" " ": : ::~~ miI
..i!lmmn~"
-.. .. ..
....
!Hi-f~

rlt;- -

' m-~

.
' ,Hi
......
,.

1ft

..-~

1- ', ....; .,

High Level Plan and Milestones

On-Going Data Governance

Data Management Data Governance Plan

~:/J,!if)??

.':

"~

~~ .- ~-~t{~~~,-:;.,~:.' .

~.f{,j1f!;~4!:~ :: .'.

''lfi[o{:!rr-

Meeting the Mandate

~]~t~j
'0' A' P M d t
l ''':'

'

~~~,p',
l--f~:::;:~

an a e

'2._~,g . I(tncrease the number of datasets available to ODAC (and eventually

;:1;:::',
.enrich its analytical capacity and support for Service investigations"
.

the Service) to

:~:.; ~
I ~,...

. "r:

-.

~!" "-..,
! b ,_
~.JI'

_,

SMART data collection methodology

o Tying in all data collections into Service investigations
o Ensuring there is no data over-colledion
o Applying rigour /validation /authentication on ODAC data collections
o Respecting current Information Management Lifecycle Management
principles and practices .

..c,.'

.,i.:;j: ,,: /lTo identify critical acquisition issues and develop a framework for obtaining bulk

5::.':".-' : data"

,~;t':.: :,
~~~Jt:

Implementation of SOP 's within the Branc h

All new data being validated and evaluated through the DAP

: .ttlM;~~~}hinking bigger: a Data Governance Framework for all

~lr;;lThe introduction of Data Governance at the Enterprise level

, "", :.

!1iifi!i.:~fJ~t;:~~h:c,'" ",

'~lIl~~~ :!;~- :t. ,t,' '

l~l~~Y

Acquisition Phase

\';\"':i':'Ensures'
;').J:~,:/:. '
.
;:,;;:r~:;
"
',:
,.c
the
compliance and enforcement of dataset collection policies
. ..
,;:!:

validation of authority to collect (legal)

managing over-collection risks (strictly necessary)
'0. proper metadafa generation (who, what, where. why, when)
establishing data ownership
establishing data stewardship
accurate documentation of all datasets
..
;:~

"

, ;

.,

..

..

~.-

;;;

 ODAC provides vital analytical support to CSIS investigations.

One aspect of this support is based on the collection and exploitation of
data sets to the extent that it is strictly necessary in order for CSIS to
carry out its mandate.
Accordingly, ODAC data collection activities are based on identified
operational needs determined through internal consultation.
ODAC collection and analysis can help fill important investigative gaps,
as well as validate and corroborate other information collected under the
authorities of the CSIS Act.
Over the past 30 years, bro~d .crtanges in th~ <operational environment, .
. 'to the s~cuJ.ity Qf .Canada.. and wide-:
including the n~tf,.lfe .Qf: .
.:.:;':!:::< .... . rapgi~~ ~~hnqi99!p'~{
.
j?P':9 ~g~~t .:; : .Lr ~i~ : <:' .... .'
!': ... . ~~ ... :

~.~

to:'! ' ~ ' -:- " ' '': .. ~ : . . . .. :

"

.....:If..q'Il.~
. ....
:: . ".

II"'~~~