Data Privacy, Security, and Compliance through Data Governance - Data Governance: Creating Value from Information Assets - page 137

CEO/CFO

Executive
Sponsor
(Varies, CIO,
CEO/CFO,
CMO/COO, PI)

PI

CMO/COO

CIO

FIGURE 6.4
Hierarchical model 4.

adherence to privacy standards, information security, and regulatory
compliance can only be achieved through effective and efficient policies.
A successful policy implementation will require clear priorities and for-
malization of policies through documentation. In an effort to formalize
and standardize data policies, stakeholders must reconcile gaps and incon-
sistencies and define requirements relative to the organizational mission.
There are three primary challenges related to implementing a data gov-
ernance adherence strategy. The first primary challenge relates directly to
the implementation of a comprehensive data governance process. Informa-
tion technology implementations are challenging in themselves especially
when they involve interdisciplinary workgroups and stakeholders; placed
on top of these complex processes is the need to overlay a data governance
strategy that outlines privacy, security, and compliance with the appropri-
ate regulations. The second relates to obtaining organizational approval
and authority to develop and approve policies and procedures. The third
challenge relates to evaluating the success of the policies and procedures
in a timely and efficient manner before unforeseen problems arise. This all
must be considered during the writing of operationally pertinent policy
and procedures.