Data Privacy, Security, and Compliance through Data Governance - Data Governance: Creating Value from Information Assets - page 134

institution's data. Thus, the roles within the committee change from scenario
1 all the way to scenario 4. Each member will share responsibility for data
privacy and compliance based on his or her role as the executive sponsor.
There is a greater level of accountability for compliance as roles vary, and
interorganizational membership to the data governance committee assures
this. Using this model will help identify the key stakeholders to help an
organization adhere to privacy, security, and compliance regulations.
The Four-Scenario Model provides examples of key stakeholders that
should govern a data governance committee based on the type of data
presented. This strategy distributes responsibilities equitably across the
committee. Nonetheless, a great concern in issues related to security and
compliance still remains: What is the role of IT? Should the data gover-
nance committee create a hierarchical structure that reports to the board
on issues of privacy, security, and compliance? What would the hierarchy
look like? In Figure 6.1 through Fig ure 6.3 , there are three potential hierar-
chical models within the committee that may produce the level of account-
ability desired by organizations. In scenario 1, the CIO/Compliance officer
lead the organization followed by the CEO/CFO and the COM/COO. In
this model, other committee members would be ancillary and provide
supporting functionality and advise as needed. The CIO/Compliance

CIO/Compliance
Ocer

CEO/CFO

CMO/COO

PI Other IT General Member

FIGURE 6.1
Hierarchical model 1.