Data Management and Data Governance

Context: FIT1043_MOC · the Governance stage of the value chain · protecting data as an asset · frames privacy and compliance

Quick Revision

  • 🎯 Objective: manage and govern data as a valuable asset ➔ management = the internal lifecycle; governance = external usage/value.
  • 📦 Core Components: management (plans/policies/practices over the lifecycle) | governance (access, protection, compliance, usage).
  • ⚡ Key Constraint: the exam split — data management = internal data lifecycle; data governance = usage/value with legal & ethical considerations.

📝 How It Works

1. Why Manage Data

  • Value ➔ data is valuable; collection is time-consuming and hard.
  • Scale ➔ large volumes generated at high growth rate, from multiple sources (business docs, ERP systems).
  • Continuous ➔ management changes over time as new technology/services arrive.

2. Data Management (internal lifecycle)

  • Definition (DAMA) ➔ development of architectures, policies, practices, procedures to manage the data lifecycle.
  • In short ➔ development/execution/supervision of plans, policies, programs, practices that control, protect, deliver and enhance the value of data assets.
  • Strategies ➔ retention period, access mechanism, archive storage, data format across lifecycle phases; plus security risk assessment and mitigation.

3. Data Governance (external usage/value)

  • Focus ➔ narrowly on access, protection, compliance, and usage — to bring maximum business benefit.
  • Issues it handles ➔ how data is organised/protected/accessed; who may access which portion (privacy/confidentiality); who manages and is accountable; policies for compliance (GDPR, PDPA).

⚖️ Core Decision Matrix

Data ManagementData Governance
Scopeinternal data lifecycleexternal usage / value
Concernstore, protect, deliver, enhance valueaccess, protection, compliance, accountability
Questionhow do we handle the data?who may use it, and under what rules?

When It Flips: the two are complementary — management runs the lifecycle inside the organisation; governance decides who uses the data and how, balancing business value against legal/ethical constraints (the "conflicting objectives").

🧠 Active Recall