PRESENTACION

Professional DevelopmentActivity ICCP Recertification CreditsAs a volunteer, (non- You could serve as an elected official, committee orcompensated) serve as an council member for a professional organization, e.g.Elected Official, Committee / DAMA, ICCP or another professional organization.Council Member of a For documentation / auditing purposes, a letter orProfessional Organization. certificate from the professional organization is required. 20 Credits Allowed Per 3 year Cycle: 1. Serve as an elected officer for a professional organization.  Minimum three months of participation: 2 recertification credits per calendar year. (No credits are awarded for service less than three months)  Minimum six months of participation: 5 recertification credits per calendar year.  Twelve months of participation: 10 recertification credits per calendar year. 2. Serve as a volunteer / appointed committee / council member for a professional organization.  Minimum three months of participation: 1 recertification credit per calendar year. (No credits are awarded for service less than three months)  Minimum six months of participation: 3 recertification credits per calendar year.  Twelve months of participation: 5 recertification credits per calendar year.Table 13.4 Ways to Earn CDMP Professional Development / Recertification CreditsRecertification credits can be entered online through the Professional DevelopmentTransmittal Form, http://www.iccp.org/cgi-bin/pdform.php. Your DAMA Internationalchapter can also keep track of meeting attendance for the purpose of recertification andsubmit on a timely basis. An annual maintenance fee to ICCP is required for keepingtrack of your recertification credits. You will receive an annual transcript from theICCP.© 2009 DAMA International 327

DAMA-DMBOK Guide13.5 Professional EthicsAs data management professionals, we inherently accept a personal obligation to theprofession and its members, and to all who use data and information. Informationconsumers expect data to possess certain qualities (completeness, accuracy, validity,etc.). Likewise, our information consumers, data stewards, managers, and colleaguesexpect professional qualities of honesty, integrity, trustworthiness, respect, maturity,courtesy, and cooperation. Through our combined behaviors, we present the professional\"face\" of data management to others. Data management professionals should strive tomaintain the highest ethical and professional conduct.Data management professionals have traditionally dismissed any responsibility for theways data is used by business people. Generally, professional responsibility for datahas been limited to making data and information ‗fit for use‘ for a particular businesspurpose. But what are those purposes, and are they ethical? Is it possible for businessto be continually aware of the potential technical or process breaches of ethics in theirplanned data use? Business data consumers are not solely responsible for ethicalbreaches; data management professionals play an advisory role in the ethical use ofdata. Ethical handling of data includes a legal framework, activities involving datasethandling, and the framing of the questions of analysis without bias. 7When discussing the ethical handling of data, the handling of personal data (e.g. name,address, religious affiliation, sexual orientation) and privacy (access or restriction tothis information) are key topics. Much has been written of the U.S. Sarbanes-Oxley,HIPPA, Canada Bill 198, and other laws emerging in the 1990‘s for our protection; it isavailable for review for further information.There are two types of ethics: compelled ethics and imposed ethics. Compelled ethicsare those that are part of an internal personal code of responsibility. Imposed ethics arethose forced on us by law or regulation. These two ethics frameworks are a way tounderstanding the approaches to privacy law in Canada and the United States, and areprofiled below to show how two countries have developed similar but differingapproaches. Refer to local law when developing corporate policy for handling personaldata and privacy.Under United States self regulatory regimes, organizations design and implement theirown privacy programs based on the criteria set down by the Federal Trade Commission(FTC):  Notice: Data collectors must disclose their information practices before collecting personal information from consumers.  Choice: Consumers must be given options with respect to whether and how personal information collected from them may be used for purposes beyond those for which the information was provided.7From FIT FOR USE TO A FAULT Deborah Henderson, Tandum Lett, Anne Marie Smith and Cora Zeeman.MITIQ 2008. The MIT 2008 Information Quality Industry Symposium, Boston, Mass. July 2008328 © 2009 DAMA International

Professional Development  Access: Consumers should be able to view and contest the accuracy and completeness of data collected about them.  Security: Data collectors must take reasonable steps to assure that information collected from consumers is accurate and secure from unauthorized use.  Enforcement: The use of a reliable mechanism to impose sanctions for noncompliance with these fair information practices.Canadian privacy law is a hybrid of a comprehensive regime of privacy protection alongwith industry self regulation. PIPEDA (Personal Information Protection and ElectronicDocuments Act) covers all businesses who collect, use, and disseminate personalinformation in the course of commercial activities. It stipulates rules, with exceptions,that organizations must follow in the collection, use, and dissemination of personalinformation.The 10 guidelines below are statutory obligations that all organizations that collect, useand disseminate personal information must follow:  Accountability: An organization is responsible for personal information under its control and must designate an individual to be accountable for the organization's compliance with the principle.  Identifying Purposes: An organization must identify the purposes for which personal information is collected at or before the time the information is collected.  Consent: An organization must obtain the knowledge and consent of the individual for the collection, use, or disclosure of personal information, except where inappropriate.  Limiting Collection, Use, Disclosure, and Retention: The collection of personal information must be limited to that which is necessary for the purposes identified by the organization. Information shall be collected by fair and lawful means. Personal information shall not be used or disclosed for purposes other than those for which it was collected, except with the consent of the individual or as required by law. Personal information shall be retained only as long as necessary for the fulfillment of those purposes.  Accuracy: Personal information must be as accurate, complete, and up-to-date as is necessary for the purposes for which it is to be used.  Safeguards: Personal information must be protected by security safeguards appropriate to the sensitivity of the information.  Openness: An organization must make specific information about its policies and practices relating to the management of their personal information readily available to individuals.© 2009 DAMA International 329

DAMA-DMBOK Guide  Individual Access: Upon request, an individual shall be informed of the existence, use, and disclosure of his or her personal information, and shall be given access to that information. An individual shall be able to challenge the accuracy and completeness of the information and have it amended as appropriate.  Challenging Compliance: An individual shall be able to address a challenge concerning compliance with the above principles to the designated individual or individuals accountable for the organization's compliance.In Canada, the federal privacy commissioner has the sole responsibility for handlingprivacy complaints against organizations. However, they fill an ombudsman rolewherein decisions are recommendations and not legally binding and decisions have noprecedential value, even within their own office.As data professionals involved in business intelligence (BI), we are actively involved inthe following types of analyses:  Who people are, including terrorist and criminal identification.  What people do, including profiling.  When people do it, including timing of data analysis, bias, accuracy.  Where people do it, including profiling and corralling choices.  How people are treated, including outcomes of analysis, such as scoring and preference tracking, that will tag them as ultimately privileged or not for future business.It is right to ask whether these activities are ethical or not, and to explore theimplications to the community before proceeding with the work. Often, though thedecision to proceed is confirmed, the manner in which to proceed may be changed. Thedata may be made anonymous, the private information removed from the file, thesecurity on the files tightened or confirmed, and a review of the local and otherapplicable privacy law reviewed. Figure 13.1 summarizes the evaluation of ethical risks.330 © 2009 DAMA International

Professional DevelopmentEvaluating Ethical Risks – a Model 1. Identifying individuals 2. Behaviour to capture Tagging method4. Privileges granted Recording method or denied Transactions identified 3. Profiling Prospects Actual and forecast transactions Figure 13.1 Ethical Risk Model for ProjectsBe aware of the following traps to ethical handling of information.  Hunch and Search: The analyst has a hunch and wants to satisfy that hunch, but only uses data that satisfies their hunch.  Data Collection for Pre-defined result: The analyst is pressured to collect data and produce results based on pre-defined desires.  Biased use of data collected: Data is used to satisfy a chosen approach; data is manipulated for a chosen approach.In summary, business users may not be aware of ―where the data comes from‖ andethical issues may not be obvious to them. Automated monitoring is not sufficientprotection from unethical activities; the analysts, themselves, need to reflect on possiblebias. Cultural norms and ethics in the workplace influence corporate behavior – learnand use the ethical risk model. DAMA International encourages data professionals totake a professional stand, and present the risk situation to business leaders; they justmight not have thought about these implications in their work.© 2009 DAMA International 331

DAMA-DMBOK Guide13.6 Notable Data Management ProfessionalsSince its inception in 1988, DAMA International has recognized data managementprofessionals who have made significant, demonstrable contributions to the datamanagement field by honoring them with a DAMA Individual Achievement Award.13.6.1 Lifetime Achievement AwardThe Lifetime Achievement Award recognizes an individual for significant contributionsto the data management profession over the course of his / her lifetime. The highesthonor bestowed by DAMA International. 2002 John Zachman 2006 Michael Brackett13.6.2 Professional Achievement AwardThe Professional Achievement Award was formerly known as the IndividualAchievement Award. It recognizes a DAMA International member who has madesignificant, demonstrable contributions to the data management profession.1988 John Zachman1988 Walter Vitale1991 Jo Meador1992 Gary Schudt1993 Belkis Leong-Hong1995 Ronald Ross1996 Barbara von Halle1997 Clive Finkelstein1998 Larry English1999 Claudia Imhoff2000 Peter Chen2001 Peter Aiken2001 E.F. ―Ted‖ Codd2002 Davida Berger2002 William (Bill) H. Inmon2003 Graeme Simsion2004 Len Silverston2005 Claudia Imhoff2006 Patricia Cupoli2007 Robert Seiner2008 David Marco2009 Jaylene McCandlish332 © 2009 DAMA International

Professional Development13.6.3 Government Achievement AwardThe Government Achievement Award recognizes a DAMA International memberworking in the public sector for data management leadership and practice.2004 Dr. John D. Graham2005 Judith Newton2008 Suzanne Acar2009 Glenn Thomas13.6.4 Academic Achievement AwardThe Academic Achievement Award recognizes a DAMA International member fromacademia for outstanding research or theoretical contributions in the field of datamanagement.2003 Dr. Terry Halpin2004 Dr. Richard Nolan2005 Dr. Richard Wang2006 Dr. Gordon Everest2007 Dr. Herbert Longnecker2008 Dr. John Talburt2009 Eva Smith13.6.5 DAMA Community AwardThe DAMA Community Award recognizes a DAMA International member who has gonebeyond the call of volunteer service to the DAMA organization and its membership.2003 Brett Champlin2004 Larry Dziedzic2005 Dr. Peter Aiken2006 Len Silverston2007 Jack Olson2008 Michael Scofield2009 Mark Mosley© 2009 DAMA International 333



AfterwordTo echo John Zachman‘s opening comment in the Foreword: Wow, what a trulymonumental piece of work!The DAMA-DMBOK Guide is the first of its kind in the data management profession,even though other Bodies of Knowledge exist in other professions. The development of aformal data management profession from a collection of different disciplines requires,actually mandates, that a Body of Knowledge be developed. That is exactly what wasdone here.Is the first DAMA-DMBOK Guide perfect? No. But, it is a major step in the rightdirection. DAMA, including both DAMA International and the DAMA Foundation, has‗driven the stake‘ and made a stand on what should comprise a formal, certified,recognized, and respected data management profession. The contents of the firstDAMA-DMBOK Guide will be evaluated, revised, and released in updated versions.It was not easy pulling the first DAMA-DMBOK Guide together. Several hundredpeople were involved in developing and reviewing the contents, and preparing the finalmanuscript for publication. These people came from different disciplines, differentprofessional backgrounds, and different operating environments. All had different ideasand thoughts about what should be included in a formal data management profession.However, in staying with the theme of professionals creating the profession, the input ofa wide variety of professionals needed to be considered.You probably noticed some inconsistencies as you read through the DAMA-DMBOKGuide. These inconsistencies are the result of including the thoughts and ideas of manydata management professionals. Although attempts were made at consistency, at leastwith respect to the over-style, the objective was to avoid forcing the thoughts of a few onthe many. It is better to surface the inconsistencies among professionals, evaluatethem, decide on the best approach, and include the refinements in revisions to theDAMA-DMBOK Guide.The evolution of the data management profession and the DAMA-DMBOK Guide isquite interesting. In the middle and late 1990‘s concern was growing about thedevelopment of a formal data management profession. A number of data managementprofessionals felt that if we, the professionals, did not develop our own formal datamanagement profession, that someone else would develop it for us. Those were verydisconcerting times.In the early 2000‘s a few of us in DAMA had a vision of a formal, certified, recognized,and respected data management profession. We developed an education curriculum,began formal certifications, established a Foundation, and prepared mission statements.We decided to develop a Body of Knowledge (BOK), which quickly evolved to a CompleteBody of Knowledge (CBOK).Subsequently, a discussion evolved about branding products that DAMA developed.Accordingly, the Data Management Body of Knowledge (DMBOK) was established.Further branding led to the DAMA-DMBOK. When we initially looked at the contentsof a complete body of knowledge, it was clear that it could not be put into a single© DAMA International 2009 335

DAMA-DMBOK Guidedocument. Hence, the DAMA-DMBOK Guide was conceived as a guide to the completebody of knowledge for data management.The DAMA-DMBOK Guide was such a daunting task that development actually beganwith the DAMA Dictionary of Data Management published in 2008. The Dictionary, likethe DAMA-DMBOK Guide is not perfect and will be revised. However, it was a startand formed the foundation for the DAMA-DMBOK Guide published in 2009. Plans arealready under way to enhance the Dictionary and the Guide.The evolution of a formal data management profession can only continue if theprofessionals are actively involved. I encourage each of you to become involved in theevolution of a formal data management profession, and encourage your fellowprofessionals to become involved. It is only through the active involvement of datamanagement professionals that a truly viable data management profession will evolveand survive. Michael Brackett Lilliwaup, Washington January, 2009336 © 2009 DAMA International

A1 Data Management SuppliersFunction Suppliers1. Data Governance2. Data Architecture Management  Business Executives3. Data Development  IT Executives  Data Stewards4. Data operations Management  Regulatory Bodies5. Data Security Management  Executives  Data Stewards6. Reference and Master Data  Data ProducersManagement  Information Consumers7. Data Warehouse and Business  Data StewardsIntelligence Management  Subject Matter Experts  IT Steering Committee8. Document and Content  Data Governance CouncilManagement  Data Architects and Analysts  Software Developers  Data Producers  Information Consumers  Executives  IT Steering Committee  Data Governance Council  Data Stewards  Data Architects and Modelers  Software Developers  Data Stewards  IT Steering Committee  Data Stewardship Council  Government  Customers  Steering Committees  Business Data Stewards  Subject Matter Experts  Data Consumers  Standards Organizations  Data Providers  Executives and Managers  Subject Matter Experts  Data Governance Council  Information Consumers (Internal and External)  Data Producers  Data Architects and Analysts  Employees  External parties© DAMA International 2009 337

DAMA-DMBOK Guide Suppliers Function  Data Stewards 9. Meta-data Management  Data Architects  Data Modelers 10. Data Quality Management  Database Administrators  Other Data Professionals  Data Brokers  Government and Industry Regulators  External Sources  Regulatory Bodies  Business Subject Matter Experts  Information Consumers  Data Producers  Data Architects  Data Modelers  Data Stewards338 © 2009 DAMA International

AppendixA2 Data Management InputsFunction Inputs1. Data Governance2. Data Architecture Management  Business Goals  Business Strategies3. Data Development  IT Objectives4. Data operations Management  IT Strategies5. Data Security Management  Data Needs  Data Issues6. Reference and Master Data Management  Regulatory Requirements  Business Goals  Business Strategies  Business Architecture  Process Architecture  IT Objectives  IT Strategies  Data Strategies  Data Issues  Data Needs  Technical Architecture  Business Goals and Strategies  Data Needs and Strategies  Data Architecture  Process Architecture  Application Architecture  Technical Architecture  Data Requirements  Data Architecture  Data Models  Legacy Data  Business Goals  Business Strategy  Business Rules  Business Process  Data Strategy  Data Privacy Issues  Related IT Policies and Standards  Business Drivers  Data Requirements  Policy and Regulations  Standards  Code Sets  Master Data  Transactional Data© 2009 DAMA International 339

DAMA-DMBOK GuideFunction Inputs7. Data Warehouse and Business IntelligenceManagement  Business Drivers  BI Data and Access Requirements8. Document and Content Management  Data Quality Requirements  Data Security Requirements9. Meta-data Management  Data Architecture  Technical Architecture10. Data Quality Management  Data Modeling Standards and Guidelines  Transactional Data  Master and Reference Data  Industry and External Data  Text Documents  Reports  Spreadsheets  Email  Instant Messages  Faxes  Voicemail  Images  Video recordings  Audio recordings  Printed paper files  Microfiche  Meta-data Requirements  Meta-data Issues  Data Architecture  Business Meta-data  Technical Meta-data  Process Meta-data  Operational Meta-data  Data Stewardship Meta-data  Business Requirements  Data Requirements  Data Quality Expectations  Data Policies and Standards  Business Meta-data  Technical Meta-data340 © 2009 DAMA International

AppendixA3 Data Management ParticipantsFunction Participants1. Data Governance2. Data Architecture Management  Executive Data Stewards  Coordinating Data Stewards3. Data Development  Business Data Stewards4. Data operations Management  Data Professionals5. Data Security Management  DM Executive  CIO6. Reference and Master Data Management  Data Stewards  Subject Matter Experts (SMEs)  Data Architects  Data Analysts and Modelers  Other Enterprise Architects  DM Executive and Managers  CIO and Other Executives  Database Administrators  Data Model Administrator  Data Stewards and SMEs  Data Architects and Analysts  Database Administrators  Data Model Administrators  Software Developers  Project Managers  DM Executives and Other IT Management  Database Administrators  Software Developers  Project Managers  Data Stewards  Data Architects and Analysts  DM Executives and Other IT Management  IT Operators  Data Stewards  Data Security Administrators  Database Administrators  BI Analysts  Data Architects  DM Leader  CIO / CTO  Help Desk Analysts  Data Stewards  Subject Matter Experts  Data Architects  Data Analysts  Application Architects  Data Governance Council  Data Providers  Other IT Professionals© 2009 DAMA International 341

DAMA-DMBOK GuideFunction Participants7. Data Warehouse and BusinessIntelligence Management  Business Executives and Managers  DM Execs and Other IT Mgmt8. Document and Content Management  BI Program Manager  SMEs and Other Info Consumers9. Meta-data Management  Data Stewards  Project Managers10. Data Quality Management  Data Architects and Analysts  Data Integration (ETL) Specialists  BI Specialists  Database Administrators  Data Security Administrators  Data Quality Analysts  All Employees  Data Stewards  DM Professionals  Records Management Staff  Other IT Professionals  Data Management Executive  Other IT Managers  Chief information Officer  Chief Knowledge Officer  Meta-data Specialist  Data Integration Architects  Data Stewards  Data Architects and Modelers  Database Administrators  Other DM Professionals  Other IT Professionals  DM Executive  Data Quality Analysts  Data Stewards  Other Data Professionals  DRM Director  Data Stewardship Council342 © 2009 DAMA International

AppendixA4 Data Management ToolsFunction Tools1. Data Governance  Intranet Website2. Data Architecture  E-MailManagement  Meta-data Tools3. Data Development  Issue Management Tools4. Data operations Management  Data Modeling Tools  Model Management Tool5. Data Security Management  Meta-data Repository  Office Productivity Tools6. Reference and Master DataManagement  Data Modeling Tools  Database Management Systems  Software Development Tools  Testing Tools  Model Management Tools  Configuration Management Tools  Office Productivity Tools  Database Management Systems  Data Development Tools  Database Administration Tools  Office Productivity Tools  Database Management System  Business Intelligence Tools  Application Frameworks  Identity Management Technologies  Change Control Systems  Reference Data Management Applications  Master Data Management Applications  Data Modeling Tools  Process Modeling Tools  Meta-data Repositories  Data Profiling Tools  Data Cleansing Tools  Data Integration Tools  Business Process and Rule Engines  Change Management Tools© 2009 DAMA International 343

DAMA-DMBOK GuideFunction Tools7. Data Warehouse andBusiness Intelligence  Business Executives and ManagersManagement  DM Execs and Other IT Mgmt  BI Program Manager8. Document and Content  SMEs and Other Info ConsumersManagement  Data Stewards  Project Managers9. Meta-data Management  Data Architects and Analysts  Data Integration (ETL) Specialists10. Data Quality Management  BI Specialists  Database Administrators  Data Security Administrators  Data Quality Analysts  All Employees  Data Stewards  DM Professionals  Records Management Staff  Other IT Professionals  Data Management Executive  Other IT Managers  Chief information Officer  Chief Knowledge Officer  Meta-data Repositories  Data Modeling Tools  Database Management Systems  Data Integration Tools  Business Intelligence Tools  System Management Tools  Object Modeling Tools  Process Modeling Tools  Report Generating Tools  Data Quality Tools  Data Development and Administration Tools  Reference and Master Data Management Tools  Data Profiling Tools  Statistical Analysis Tools  Data Cleansing Tools  Data Integration Tools  Issue and Event Management Tools344 © 2009 DAMA International

AppendixA5 Data Management Primary DeliverablesFunction Primary Deliverables1. Data Governance2. Data Architecture Management  Data Policies  Data Standards3. Data Development  Resolved Issues  Data Mgmt Projects and Services4. Data operations Management  Quality Data and Information5. Data Security Management  Recognized Data Value  Enterprise Data Model  Information Value Chain Analysis  Database Architecture  Data Integration / MDM Architecture  DW / BI Architecture  Meta-data Architecture  Enterprise Taxonomies and Namespaces  Document Management Architecture  Meta-data  Data Requirements and Business Rules  Logical Data Models and Specifications  Physical Data Models and Specifications  Meta-data (Business and Technical)  Data Modeling and DB Design Standards  Data Model and DB Design Reviews  Version Controlled Data Models  Test Data  Development and Test Databases  Information Products  Data Access Services  Data Integration Services  Migrated and Converted Data  DBMS Technical Environments  Dev / Test, QA, and Production Databases  Externally Sourced Data  Database Performance  Data Recovery Plans  Business Continuity  Data Retention Plan  Archived and Purged Data  Data Security Policies  Data Privacy and Confidentiality Standards  User Profiles, Passwords and Memberships  Data Security Permissions  Data Security Controls  Data Access Views  Document Classifications  Authentication and Access History  Data Security Audits© 2009 DAMA International 345

DAMA-DMBOK GuideFunction Primary Deliverables6. Reference and Master DataManagement  Master and Reference Data Requirements7. Data Warehouse and Business  Data Models and DocumentationIntelligence Management  Reliable Reference and Master Data  ―Golden Record‖ Data Lineage8. Document and Content Management  Data Quality Metrics and Reports  Data Cleansing Services9. Meta-data Management  DW / BI Architecture10. Data Quality Management  Data Warehouses  Data Marts and OLAP Cubes  Dashboards and Scorecards  Analytic Applications  File Extracts (for Data Mining / Stat. Tools)  BI Tools and User Environments  Data Quality Feedback Mechanism / Loop  Managed records in many media formats  E-discovery records  Outgoing letters and emails  All contracts and financial documents  Policies and procedures  Audit trails and logs  Meeting minutes  Formal reports  Significant memoranda  Meta-data Repositories  Quality Meta-data  Meta-data Models and Architecture  Meta-data Management Operational Analysis  Meta-data Analysis  Data Lineage  Change Impact Analysis  Meta-data Control Procedures  Higher Quality Data  Data Management Operational Analysis  Data Profiles  Data Quality Certification Reports346 © 2009 DAMA International

AppendixA6 Data Management ConsumersFunction Consumers1. Data Governance2. Data Architecture Management  Data Producers  Knowledge Workers3. Data Development  Managers and Executives  Data Professionals4. Data operations Management  Customers5. Data Security Management  Data Stewards  Data Architects6. Reference and Master Data  Data AnalystsManagement  Database Administrators  Software Developers7. Data Warehouse and Business  Project ManagersIntelligence Management  Data Producers  Knowledge Workers  Managers and Executives  Data Producers  Knowledge Workers  Managers and Executives  Customers  Data Professionals  Other IT Professionals  Data Creators  Information Consumers  Enterprise Customers  Data Professionals  Other IT Professionals  Data Producers  Knowledge Workers  Managers  Executives  Customers  Data Professionals  Application Users  BI and Reporting Users  Application Developers and Architects  Data Integration Developers and Architects  BI Developers and Architects  Vendors, Customers, and Partners  Knowledge Workers  Managers and Executives  External Customers  Internal Systems  Data Professionals  Other IT Professionals© 2009 DAMA International 347

DAMA-DMBOK GuideFunction Consumers8. Document and Content Management9. Meta-data Management  Business and IT users  Government regulatory agencies10. Data Quality Management  Senior management  External customers  Data Stewards  Data Professionals  Other IT Professionals  Knowledge Workers  Managers and Executives  Customers and Collaborators  Data Stewards  Data Professionals  Other IT Professionals  Knowledge Workers  Managers and Executives  Customers348 © 2009 DAMA International

AppendixA7 Data Management MetricsFunction Metrics1. Data Governance  Data Value2. Data Architecture Management  Data Management Cost3. Data Development  Achievement of Objectives4. Data operations Management  # of Meetings Held5. Data Security Management  # of Decisions Made6. Reference and Master Data Management  Steward Representation / Coverage  Data Professional Headcount7. Data Warehouse and Business Intelligence  Data Management Process MaturityManagement8. Document and Content Management 9. Meta-data Management 10. Data Quality Management  Availability  Performance   Reference and Master Data Quality  Change Activity  Issues, Costs, Volume  Use and Re-Use  Availability  Data Steward Coverage  Usage Metrics  Customer / User Satisfaction  Subject Area Coverage %s  Response / Performance Metrics  Return on investment  Key Performance Indicators  Balanced Scorecards  Meta Data Quality  Master Data Service Data Compliance  Meta-data Repository Contribution  Meta-data Documentation Quality  Steward Representation / Coverage  Meta-data Usage / Reference  Meta-data Management Maturity  Meta-data Repository Availability  Data Value Statistics  Errors / Requirement Violations  Conformance to Expectations  Conformance to Service Levels© 2009 DAMA International 349

DAMA-DMBOK GuideA8 Software Product ClassesClasses of Technology DescriptionDatabase Management  Relational Database Management Systems (RDBMS).Systems (DBMS)  Multi-Dimensional Database Management SystemsModeling and Meta-data (MDBMS).Tools  Object-Oriented Database Management SystemsData Development and (OODBMS).Administration tools  Hierarchical Database Management Systems.Data Integration Tools  Network Database Management Systems.Data Quality ToolsBusiness Intelligence Tools  Data Modeling Tools.  Model Management Tools.Reference and Master Data  Process Modeling Tools.Management Tools  Object Modeling Tools.  Meta-data Repositories.  Glossaries.  Directories.  Taxonomies.  Database Development Tools.  Database Administration Tools.  Testing Tools.  Software Configuration Management Tools (source code library and version control).  Issue and Defect Management Tools.  Project Management Tools.  Data Movement Tools (ETL).  Enterprise Application Integration (EAI) Tools.  Data Transparency Tools.  Data Profiling Tools.  Data Cleansing Tools.  Ad Hoc Query and Reporting Tools.  Enterprise Reporting Tools.  Online Analytical Processing (OLAP) Tools.  Desktop OLAP Tools.  Multi-Dimensional OLAP (MOLAP) Tools.  Relational OLAP (ROLAP) Tools.  Statistical Analysis Tools.  Data Mining / Predictive Analysis Tools.  Scenario Modeling Tools.  Specialized Analytical Applications (Analytics).  Executive Information Systems.  Business Performance Management Tools.  Master Data Management System Environments.  Customer Data Integration Solutions.  Product Data Integration Solutions.  Dimensional Hierarchy Management Tools.350 © 2009 DAMA International

AppendixA9 Summary Process TablesThe process summary tables from each chapter have been included in an Appendix toprovide a ready reference to all the processes. The codes in parentheses is P forPlanning, D for Develop and Deploy, O for Operate, and C for Control.A9.1 Data Governance Activities Deliverables Responsible Approving Contributing Roles Roles Roles1.1.1 Understand StrategicStrategic Enterprise Enterprise Data DM Executive Data Data Stewards,Data Needs (P) Needs DM Executive Governance Data Council, CIO management1.1.2 Develop and Data Strategy – CIO professionalsMaintain the Data Vision, Mission, Data Data Stewards,Strategy (P) Bus. Case, Goals, Governance Data Objectives, Council, CIO management1.1.3 Establish Data Principles, professionalsManagement Components, DataProfessional Roles Metrics, Governance DM Executiveand Organizations Implementation Council(P) Roadmap1.1.4 Establish DataGovernance and Data ManagementStewardship ServicesOrganizations (P) organizations and staff1.1.5 Identify andAppoint Data Data Governance DM Executive, Senior Mgmt Data Stewards,Stewards (P) Council, CIO, Data Data Governance management Data Stewardship Committee, Council professionals Data Stewardship Teams Business Data DM Executive, Data Coordinating Stewards, Executive Governance Data Stewards, Data Stewards Council Data Coordinating Data management Stewards, professionals Executive Data Stewards© 2009 DAMA International 351

DAMA-DMBOK GuideActivities Deliverables Responsible Approving Contributing Roles Roles Roles1.1.6 Develop, Data Policies, DM Executive Data DataReview and Approve Governance StewardshipData Policies, Data Standards, Council, CIO Committee,Standards, and Data Management DataProcedures (P) Procedures Stewardship Teams, Data management professionals1.1.7 Review and Adopted Data Data Enterprise Data Enterprise Data Architect,Approve Data Model, Governance Governance DataArchitecture (P) Council Council, CIO Stewardship Related Data Committee, Architecture Data Stewards, Data Architects, DM Executive1.1.8 Plan and Data Management Data Data DM Executive,Sponsor Data Projects, Governance Governance DataManagement Projects Council Council, managementand Services (P) Data Management CIO, professionals, Services Data Stewards IT Steering Committee1.1.9 Estimate Data Data Asset Value Data Stewards Data DM Executive, Estimates,Asset Value and Governance DataAssociated Costs (P) Data Mgmt. Cost Council management Estimates professionals1.2.1 Supervise Data Data Management DM CIO DataProfessional Services Executive(s) managementOrganizations and organization(s) and professionalsStaff (C) staff1.2.2 Coordinate Data Governance DM Executive, Data DataData Governance Organization Enterprise Governance managementActivities (C) Schedules, Data Council, professionals Meetings, Architect, Agendas, Data Documents, Data Stewardship Architects Committee, Minutes Data Stewardship Teams, CIO352 © 2009 DAMA International

AppendixActivities Deliverables Responsible Approving Contributing Roles Roles Roles DM Executive,1.2.3 Manage and Issue Log, Issue Data Data Data Stewardship Stewardship managementResolve Data Related Resolutions Teams, Teams, professionalsIssues (C) Data Data DM Executive, Stewardship Stewardship CIO Committee, Committee, DM Executive Data Data Governance Governance Data Council Council management professionals1.2.4 Monitor and Compliance Data Data Data StewardsEnsure Regulatory Reporting, Non- management GovernanceCompliance (C) compliance Issues professionals Council1.2.5 Communicate, Policy / Standards / Data DataMonitor and Enforce Arch / Procedure management GovernanceConformance with Communication, professionals, Council,Data Policies, DataStandards, Non-conformance Stewards Data Issues StewardshipProcedures, and CommitteeArchitecture (C)1.2.6 Oversee Data DM Executive DataManagement Projects Governanceand Services (C) Council1.2.7 Communicate Data Management DM Executive, Dataand Promote the Website, GovernanceValue of Data and Data Council Data Management managementData Management Newsletter, professionals,(C) Data Understanding Stewards, and Recognition CIO© 2009 DAMA International 353

DAMA-DMBOK GuideA9.2 Data Architecture Management Activities Deliverables Responsible Approving Contributing2.1 Understand Roles Roles RolesEnterpriseInformation Needs Lists of essential Enterprise Data Data Data Architects,(P) Governance Data Stewards / information Architect, Council, Teams2.2 Develop and DataMaintain the requirements Business SME‘s Architecture Data Architects,Enterprise Data Steering Data Stewards /Model (P) Enterprise Data Enterprise Data Committee, Teams, Model: Architect DM Enterprise2.3 Analyze and Executive, ArchitectsAlign With Other  Subject Area CIOBusiness Models (P) Model Database Data Administrators,2.4 Define and  Conceptual Governance Other DataMaintain the Data Model Council, Management.Technology Data ProfessionalsArchitecture (P)  Logical Model Architecture Steering  Glossary Committee, DM Information Enterprise Data Executive, Value Chain Architect CIO Analysis Matrices Data Governance  Entity / Council, Function Data Architecture  Entity / Org Steering and Role Committee, DM  Entity / Executive, Application CIO Data Technology Enterprise Data DM Architecture Architect Executive, (Technology, CIO,Data Architecture Distribution, Steering Usage) Committee, Data Governance Council354 © 2009 DAMA International

Appendix Activities Deliverables Responsible Approving Contributing2.5 Define and Roles Roles RolesMaintain the DataIntegration Data Integration Enterprise Data DM DatabaseArchitecture (P) Architecture Architect Executive, Administrators, CIO,Data Data Integration2.6 Define and  Data Lineage Architecture Specialists,Maintain the Data / Flows Steering Other DataWarehouse / BI Committee, ManagementArchitecture (P)  Entity Data Professionals Lifecycles Governance2.7 Define and Council BusinessMaintain Enterprise Data Warehouse Data Warehouse IntelligenceTaxonomies and Architect Enterprise Specialists, DataNamespaces / Business Data Integration Intelligence Architect, Specialists,2.8 Define and Architecture DM DatabaseMaintain the Meta- Executive, Administrators,data Architecture (P) Enterprise Enterprise Data CIO, Other Data Taxonomies, Architect Management. Data Professionals XML Architecture Namespaces, Steering Other Data Committee, Architects, Content Data Other Data Management Governance Management Standards Council Professionals Meta-data Meta-data DM Meta-data Architecture Architect Executive, Specialists, CIO, Other Data Data Management. Architecture Professionals Steering Committee, Data Governance Council Enterprise Data Architect, DM Executive, CIO, Data Architecture Steering Committee, Data Governance Council© 2009 DAMA International 355

DAMA-DMBOK GuideA9.3 Data Development Activities Deliverables Responsible Approving Contributing Roles Roles Roles3.1.1 Analyze InformationInformation Requirement Data Architects, Data Data Stewards,Requirements (D) Specification Data Analysts Stewards Other SMEs Statements3.1.2 Develop and Data Architects, Data Data Stewards,Maintain Conceptual Data Data Analysts Stewards, Other SMEsConceptual Data Model Diagrams DataModels (D) and Reports Data Architects, Architects Data Stewards, Data Analysts, Other SMEs3.1.3 Develop and Logical Data Data Modelers DataMaintain Logical Model Diagrams Stewards, SoftwareData Models (D) and Reports Data Architects, Data Developers Data Modelers, Architects3.1.4 Develop and Physical Data DBAs Data Analysts,Maintain Physical Model Diagrams DBAs, Data Data Modelers,Data Models (D) and Reports DBAs, Architects Software Application Developers3.2.1 Design DDL Architects, DataPhysical Databases Specifications, Software Architects, Data Analysts,(D) OLAP Cube Developers DBAs, DBAs Specs, XML Application3.2.2 Design schemas Software Architects Data Analysts,Information Developers DBAsProducts (D) Application Application Screens, Reports Architects Data Analysts,3.2.3 Design Data Data Stewards,Access Services (D) Data Access Software Application DBAs Service Design Developers, Architects,3.2.4 Design Data Data Stewards,Integration Services Specifications DBAs Data Application(D) Architects Architects, Software3.3.1 Develop Data Source-to-Target Data Integration DBAs, DevelopersModeling and Maps, ETL Specialists, DataDatabase Design Design Specs, DBAs, Data Architects,Standards (P) Conversion Analysts Application Designs Architects Data Modeling Data Architects, DM Standards Data Analysts, Executive, Documents, Data Modelers, Data Database Design DBAs Governance Standards Council Documents356 © 2009 DAMA International

AppendixActivities Deliverables Responsible Approving Contributing Roles Roles Roles3.3.2 Review Data Design Review Data Architects, DM ApplicationModel and Database Findings Data Analysts, Executive, Architects,Design Quality (C) Data Modelers, Project Software Developers DBAs Manager Data Analysts, DBAs3.3.3 Manage Data Model Data Model Data Data Architects,Model Versioning Management Administrators, Architects, Data Analysts,and Integration (C) Libraries and Data Modelers DM Software Contents Executive Developers3.4.1 Implement Dev and Test DB DBAs DM Data Stewards,Development and Environments, Executive SoftwareTest Database Database Developers,Changes (D) Tables, Other Data Analysts DB Objects Data Analysts3.4.2 Create and Test Databases, DBAs, Data Data DBAs,Maintain Test Data Test Data Analysts, Architects, Data Analysts(D) Software Application Developers, Test Architects, DBAs Analysts Data Stewards DBAs, Data Analysts3.4.3 Migrate and Migrated and DBAs, DataConvert Data (D) Converted Data Data Analysts, Software Stewards, Data Architects, Developers Data DBAs Architects3.4.4 Build and Test Information Software Data Stewards,Information Products Products: Developers Application Architects,(D) Screens, Reports Data Architects3.4.5 Build and Test Data Access Software DataData Access Services Services Developers Architects,(D) Application (interfaces) Architects3.4.6 Build and Test Data Integration Data Integration DataData Integration Services (ETL, Specialists Stewards,Services (D) etc.) Data Architects3.4.7 Validate Validated Data Stewards, DataInformation Requirements, Testing StewardsRequirements (D) User Acceptance Specialists Signoff© 2009 DAMA International 357

DAMA-DMBOK GuideActivities Deliverables Responsible Approving Contributing Roles Roles Roles3.4.8 Prepare for User Training,Data Deployment (D) User Data Stewards, Data Data Stewards, Documentation Business SMEs, Stewards, Data Architects, Training Data DBAs Specialists, Data Architects AnalystsA9.4 Data Operations Management Activities Deliverables Responsible Approving Contributing Roles Roles Roles4.1.1 Implement andControl Database Production DBAs DM SystemEnvironments database Executive programmers, data stewards,4.1.2 Acquire environment Data data analysts,Externally Sourced maintenance, Governance softwareData (O) managed changes Council developers,4.1.3 Plan for Data to production DM projectRecovery (P) databases, Executive, managers releases Data4.1.4 Backup and Governance Data stewards,Recover Data (O) Externally sourced DBAs, data Council data analysts DM4.1.5 Set Database data analysts, data ExecutivePerformance ServiceLevels (P) stewards DM Executive,4.1.6 Monitor and Data availability DBAs DataTune Database SLAs, data GovernancePerformance (O) recovery plans Council Database backups DBAs and logs,restored DBAs databases,busines s continuity Database performance SLAs Database DBAs performance reporting, Database performance358 © 2009 DAMA International

Appendix Activities Deliverables Responsible Approving Contributing Roles Roles Roles4.1.7 Plan for Data Data retentionRetention (P) plan, storage DBAs DM Storage management Executive management4.1.8 Archive, procedures specialistsRetrieve and Purge Archived data, DBAs DMData (O) retrieved data, DBAs Executive Data stewards,4.1.9 Manage purged data Subject matterSpecialized Geospatial DM expertsDatabases (O) databases, Executive CAD / CAM Data stewards,4.2.1 Understand databases, Data architect, DM other ITData Technology XML databases, professionalsRequirements (P) object databases DBAs Executive DBAs, data4.2.2 Define the Data technology analysts, dataDatabase requirements Data architect DM stewardsArchitecture (P) Executive,(same as 2.3) Data technology Data analysts, Data Data stewards, architecture DBAs Governance other IT4.2.3 Evaluate Data Council professionalsTechnology (P) Tool evaluation DBAs findings, tool DM Data analysts,4.2.4 Install and selection decisions Executive, other dataAdminister Data Data professionalsTechnology (O) Installed Governance Other data4.2.5 Inventory and technology Council professionalsTrack DataTechnology Licenses License inventory DM(C) Executive4.2.6 Support DataTechnology Usage DBAs DMand Issues (O) Executive Identified and DBAs DM Other data resolved Executive professionals technology issues© 2009 DAMA International 359

DAMA-DMBOK GuideA9.5 Data Security ManagementActivities Deliverables Responsible Approving Contributing Roles Roles Roles5.1 Understand Data SecurityData Security Requirements Data Stewards, Data Data Stewards,Needs and and Regulations DM Executive, Governance LegalRegulatory Security Council Department,Requirements (P) Data Security Administrators IT Security Policy Data5.2 Define Data Data Stewards, Governance Data Stewards,Security Policy (P) DM Executive, Council Legal Security Department,5.3 Define Data Data Security Administrators Data IT SecuritySecurity Standards Standards Governance(P) Data Stewards, Council Data Stewards, DM Executive, Legal5.4 Define Data Data Security Security DM Executive Department,Security Controls Controls and Administrators IT Security Managementand Procedures (D) Procedures Security Data Stewards, Administrators Management IT Security5.5 Manage Users, User Accounts,Passwords and Passwords, Security Data Producers,Group Membership Administrators, Data(C) Role Groups DBAs Consumers, Help Desk5.6 Manage Data Data Access SecurityAccess Views and Views Data Administrators, Data Producers,Permissions (C) Resource DBAs Data Consumers, Permissions Software Developers,5.7 Monitor User Data Access Security DM Executive Management,Authentication and Logs, Security Administrators, Help DeskAccess Behavior (C) Notification DBAs Management Alerts, Data Data Stewards,5.8 Classify Security Reports Document Data Help DeskInformation Authors, Report GovernanceConfidentiality (C) Classified Designers, Data Council, Data Stewards Documents, Stewards DM Executive5.9 Audit Data Classified SecuritySecurity (C) Databases Data Security Administrators, Auditors DBAs, Data Data Security Stewards Audit Reports360 © 2009 DAMA International

AppendixA9.6 Reference and Master Data ManagementActivities Deliverables Responsible Approving Contributing Roles Roles Roles6.1 Understand Reference and Business Stakeholde Business DataReference Data Master Data Analysts rs, Data Stewards,Integration Needs Requirements Governance Subject Matter(P) Council Experts6.2 Identify Description Data Data Data Analysts, and Architects,Reference Data Assessment of Data Stewards Governance Subject MatterSources and Sources and Council Experts ContributorsContributors (P)6.3 Define and Reference and Data Data ApplicationMaintain the Data Master Data ArchitectsIntegration Integration Governance Architects,Architecture (P) Architecture Council Data Stewards and Roadmap Data Data IT Other IT Integration Architects, Manageme Services Application nt Professionals, Design Architects Stakeholders Specifications6.4 Implement Reference Data Application Data Other IT Management Architects,Reference and Governance Professionals Applications DataMaster Data and Databases, Architects Council Master DataManagement Management ApplicationSolutions (D) and Databases Data Quality Application Data Data Analysts, Services Architects, Data Governance Other IT Architects Council Professionals Data Data Data Data Analysts, Replication Architects, and Access Application Governance Other IT Services for Architects, Applications Integration Council Professionals© 2009 DAMA International 361

DAMA-DMBOK GuideActivities Deliverables Responsible Approving Contributing Roles Roles Roles Data Developers Replication Services for Data Warehousing6.5 Define and Record Business Data ApplicationMaintain Match Matching Analysts, Data Governance Architects,Rules (P) Rules Architects, Council Subject Matter (Functional Business Data Experts Specifications) Stewards6.6 Establish Reliable Data Stewards Stakeholde Data Analysts,Golden rs Data(C) Records Reference and Architects, Subject Matter Master Data Experts, Other IT Professionals Cross- Data Stewards Stakeholde Data Analysts, rs Subject Matter Reference Data Experts Data Lineage Data Data Data Analysts Stewards Reports Architects Data Quality Data Analysts Data Data Reports Stewards, Architects Stakeholde rs6.7 Define and Defined Data Stewards Stakeholde Data Analysts,Maintain Hierarchies rs Data ProvidersHierarchies and and AffiliationsAffiliations (C)6.8 Plan and Data Source Data Analysts, Data DataImplement Quality and Data Stewards, Providers,Integration of New Integration Architects, IT Subject MatterSources (D) Assessments Application Manageme Experts Architects nt362 © 2009 DAMA International

AppendixActivities Deliverables Responsible Approving Contributing Roles Roles Roles Integrated new Data Data Data Analysts, data source Architects, Stewards, Other IT Application Stakeholde Architects rs Professionals6.9 Replicate and Replicated Data Data Data Analysts, Data Architects, Stewards,Distribute Other IT Application StakeholdeReference and Architects rs, ProfessionalsMaster Data (O)6.10 Manage Change Data Data Other IT Request Architects GovernanceChanges to Professionals, Procedures Council,Reference and Data Stakeholders StewardsMaster Data (C) Change Data Stewards Data Stakeholders, Governance Data Analysts, Requests and Council Data Responses Architects, Application Architects Change Data Data Data Analysts, Architects Request Stewards, Other IT Metrics Data Governance Professionals CouncilA9.7 Data Warehouse and Business IntelligenceManagementActivities Deliverables Responsible Approving Contributing Roles Roles Roles7.1 Understand DW-BIM ProjectBusiness Requirements Data / BI Data Meta-DataIntelligence Analyst, Steward, Specialist,Information Needs BI Program Business Business(P) Manager, Executives Process Lead and SME Managers© 2009 DAMA International 363

DAMA-DMBOK GuideActivities Deliverables Responsible Approving Contributing Roles Roles Roles7.2 Define the Data Data Warehouse / Data Warehouse Enterprise BusinessWarehouse / BI Business Architect, Data IntelligenceArchitecture (P) Intelligence Architect, Specialists, Business DM(same as 2.1.5) Architecture Intelligence Executive, Data Architect CIO, Integration Specialists, Data DBAs, Other Architecture Data Mgmt. Steering Professionals, Committee, Data IT architects Governance Council Data Integration7.3 Implement Data Data Warehouses, Business Data Specialists, Warehouse DBAs, OtherWarehouses and Data Marts, OLAP Intelligence Architect, Data Mgmt. Professionals,Data Marts (D) Cubes Specialists Data Other IT Stewardship Professionals Teams Data7.4 Implement BI Tools and User Business Data WarehouseBusiness Environments, Intelligence Warehouse Architect, Other DataIntelligence Tools Query and Specialists Architect, Mgmt.and User Interfaces Reporting, Data Professionals,,(D) Dashboards, Stewardship Other IT Scorecards, Committee, Professionals Analytic Data Other Data Applications, etc. Mgmt. Governance Professionals, Council, Business Other IT Executives Professionals and Managers IT Operators7.5 Process Data for Accessible Data Integration DataBusiness Integrated Data,Intelligence (O) Specialists Stewards Data Quality Feedback Details7.6 Monitor and DW Performance DBAs,Tune Data ReportsWarehousing Data Integration SpecialistsProcesses (C)364 © 2009 DAMA International

Appendix Activities Deliverables Responsible Approving Contributing Roles Roles Roles7.7 Monitor and BI PerformanceTune BI Activity Reports, New Business Other Dataand Performance Indexes, New Intelligence Mgmt.(C) Aggregations Specialists, Professionals, DBAs, IT Operators, Business Intelligence IT Auditors AnalystsA9.8 Document and Content ManagementActivities Deliverables Responsible Approving Contributing Roles Roles Roles8.1 Document andRecordsManagement8.1.1 Plan for Document Document Data Data Architects,Managing Management System Governance Data Analysts,Documents / Strategy and Managers, Council Business DataRecords (P) Roadmap Records Stewards Managers8.1.2 Implement Document / Record Document SubjectDocument / Record Management System MatterManagement Systems (including Managers, ExpertsSystems for image and e-mailAcquisition, systems), RecordsStorage, Access, Managers Portalsand SecurityControls (O, C) Paper and Electronic Documents (text, graphics, images, audio, video)8.1.3 Backup and Backup Files DocumentRecover Documents Systems Business/ Records (O) Continuity Managers, Records Managers8.1.4 Retain and Archive Files Document SystemsDispose Documents Managed Storage Managers,/ Records (O) Records Managers© 2009 DAMA International 365

DAMA-DMBOK GuideActivities Deliverables Responsible Approving Contributing Roles Roles Roles8.1.5 Audit Document / Record Audit ManagementDocument / RecordManagement (C) Management Department, Audits Management8.2 ContentManagement8.2.1 Define and Enterprise Knowledge Data Data Architects, ManagersMaintain Taxonomies Governance Data Analysts,Enterprise (Information Council Business DataTaxonomies (P) Content Stewards Architecture)8.2.2 Document / Indexed DocumentIndex Information Keywords, Meta- SystemsContent Meta-data data Managers,(D) Records Managers8.2.3 Provide Portals, Content Document Subject Data Architects,Content Access and Analysis, Systems Matter Data AnalystsRetrieval (O) Leveraged Managers, Experts Information Records Managers8.2.4 Govern for Leveraged Document Business Data Data ManagementQuality Content (C) Information Systems Stewards Professionals Managers, Records ManagersA9.9 Meta-data Management Activities Deliverables Responsible Approving Contributing Roles Roles Roles9.1 Understand Meta-dataMeta-data requirements Meta-data Enterprise Other ITRequirements (P) Specialists Data Professionals Architect, Data Stewards Other DM DM Leader, Professionals Data Architects and Modelers Data Stewardship Database Committee Administrators366 © 2009 DAMA International

Appendix Activities Deliverables Responsible Approving Contributing9.2 Define the Meta-data Roles Roles RolesMeta-data architectureArchitecture (P) Meta-data Enterprise Meta-data Meta-data Architects, Data Specialists,9.3 Develop and standards Architect, Other DataMaintain Meta- Data Integration Mgmt.data Standards (P) Meta-data metrics Architects DM Leader, Professionals Other IT9.4 Implement a CIO ProfessionalsManaged Meta-data Environment Data Other IT(D) Stewardship Professionals Committee Other DM Database Professionals Administrat ors Other IT Professionals Meta-data and Enterprise Data Architects Data Architect, Data Stewards DM Leader, Database Administrators Data Stewardship Committee Database Enterprise Administrators Data Architect, DM Leader, Data Stewardship Committee© 2009 DAMA International 367

DAMA-DMBOK Guide Activities Deliverables Responsible Approving Contributing9.5 Create and Roles Roles RolesMaintain Meta-data (O) Updated: Meta-data Enterprise Other IT Specialists Data Professionals9.6 Integrate Meta- • Data Modeling Architect,data (C) Tools Data Stewards DM Leader, Other IT Data Professionals • Database Data Architects Stewardship Management and Modelers Committee Systems Database Enterprise • Data Administrators Data Integration Architect, Tools DM Leader, Data • Business Stewardship Intelligence Committee Tools • System Management Tools • Object Modeling Tools • Process Modeling Tools • Report Generating Tools • Data Quality Tools • Data Development and Administratio n Tools Reference and Master Data Management Tools Integrated Meta- Integration Data data repositories Architects Meta-data Specialists Data Stewards Data Architects and Modelers Database Administrators368 © 2009 DAMA International

Appendix Activities Deliverables Responsible Approving Contributing Roles Roles Roles9.7 Manage Meta- Managed Meta-data Repositories data repositories Meta-data Enterprise Other IT(C) Administration Specialists Data Professionals Principles, Architect,9.8 Distribute and Practices, Tactics Data StewardsDeliver Meta-data DM Leader,(O) Distribution of Data Architects Meta-data and Modelers Data Meta-data Models Stewardship and Architecture Database Committee Administrators Enterprise Meta-data Database Data Architects Administrators Architect, Business9.9 Query, Report Quality Meta-data Data Analysts, DM Leader, Intelligenceand Analyze Meta- Specialists,data (O) Meta-data Meta-data Data Data Integration Management Analysts Stewardship Specialists, Operational Committee Database Analysis Administrators, Enterprise Other Data Meta-data Data Mgmt. Analysis Architect, Professionals Data Lineage DM Leader, Change Impact Data Analysis Stewardship CommitteeA9.10 Data Quality ManagementActivities Deliverables Responsible Approving Contributing Roles Roles Roles10.1 Develop and Data qualityPromote Data training Data Quality Business InformationQuality Awareness Manager Managers Architects Data Governance(O) Processes DRM Subject Matter Director Experts Established Data Stewardship Council© 2009 DAMA International 369

DAMA-DMBOK GuideActivities Deliverables Responsible Approving Contributing Roles Roles Roles10.2 Define Data Data Quality Data Quality Business InformationQuality Requirements Manager Managers ArchitectsRequirements ((D) Document Data Quality DRM Subject Matter Analysts Director Experts10.3 Profile, Data Quality Data Quality Business Data Analysts ManagersAnalyze, and Assessment StewardshipAssess Data Report DRM CouncilQuality (D) Director10.4 Define Data Data Quality Data Quality Business DataQuality Metrics (P) Metrics Document Manager Managers Stewardship Council10.5 Define Data Data Quality Data Quality DRMQuality Business Business Rules Analysts DirectorRules (P) Data Quality Business Information Analysts Managers Architects DRM Subject Matter Director Experts Data Quality Data Manager Stewardship Council10.6 Test and Data Quality Test Data Quality Business Information Managers ArchitectsValidate Data Cases AnalystsQuality DRM Subject MatterRequirements (D) Director Experts10.7 Set and Data Quality Data Quality Business DataEvaluate Data Service Levels Manager Managers StewardshipQuality Service CouncilLevels (P) DRM Director10.8 Continuously Data Quality Data Quality Business Data Reports Manager ManagersMeasure and StewardshipMonitor Data DRM CouncilQuality (C) Director10.9 Manage Data Data Quality Data Quality Business DataQuality Issues (C) Issues Log Manager Managers Stewardship Council Data Quality DRM Analysts Director10.10 Clean and Data Quality Data Quality Business InformationCorrect Data Defect Resolution Analysts Managers ArchitectsQuality Defects (O) Log DRM Subject Matter Director Experts370 © 2009 DAMA International

Appendix Activities Deliverables Responsible Approving Contributing Roles Roles Roles10.11 Design and Operational DQMImplement Procedures Data Quality Business InformationOperational DQM Manager Managers ArchitectsProcedures (D) DRM Data Quality Director Subject Matter10.12 Monitor Analysts ExpertsOperational DQM BusinessProcedures and Operational DQM Data Quality Managers DataPerformance (C) Metrics Manager DRM Stewardship Director Council Data Quality Analysts Data Stewardship Council© 2009 DAMA International 371



A10 StandardsThe standards listed in the selected reading from each chapter have been combined intoa single appendix and sorted in alphabetical order by the standard name for readyreference.A10.1 Non-United States Privacy Laws: Argentina: Personal Data Protection Act of 2000 (aka Habeas Data). Austria: Data Protection Act 2000, Austrian Federal Law Gazette Part I No. 165/1999 (DSG 2000). Australia: Privacy Act of 1988. Brazil: Privacy currently governed by Article 5 of the 1988 Constitution. Canada: The Privacy Act - July 1983, Personal Information Protection and Electronic Data Act (PIPEDA) of 2000 (Bill C-6). Chile: Act on the Protection of Personal Data, August 1998. Columbia: No specific privacy law, but the Columbian constitution provides any person the right to update and access their personal information. Czech Republic: Act on Protection of Personal Data (April 2000) No. 101. Denmark: Act on Processing of Personal Data, Act No. 429, May 2000. Estonia: Personal Data Protection Act, June 1996, Consolidated July 2002. European Union: Data Protection Directive of 1998. European Union: Internet Privacy Law of 2002 (DIRECTIVE 2002/58/EC). Finland: Act on the Amendment of the Personal Data Act (986) 2000. France: Data Protection Act of 1978 (revised in 2004). Germany: Federal Data Protection Act of 2001. Greece: Law No.2472 on the Protection of Individuals with Regard to the Processing of Personal Data, April 1997. Hong Kong: Personal Data Ordinance (The \"Ordinance\"). Hungary: Act LXIII of 1992 on the Protection of Personal Data and the Publicity of Data of Public Interests. Iceland: Act of Protection of Individual; Processing Personal Data (Jan 2000). Ireland: Data Protection (Amendment) Act, Number 6 of 2003. India: Information Technology Act of 2000. Italy: Data Protection Code of 2003 Italy: Processing of Personal Data Act, Jan. 1997. Japan: Personal Information Protection Law (Act).© DAMA International 2009 373

DAMA-DMBOK Guide Japan: Law for the Protection of Computer Processed Data Held by Administrative Organizations, December 1988. Korea: Act on Personal Information Protection of Public Agencies Act on Information and Communication Network Usage. Latvia: Personal Data Protection Law, March 23, 2000. Lithuania: Law on Legal Protection of Personal Data (June 1996). Luxembourg: Law of 2 August 2002 on the Protection of Persons with Regard to the Processing of Personal Data. Malaysia: Common Law principle of confidentiality Draft Personal data Protection Bill Banking and Financial Institutions Act of 1989 privacy provisions. Malta: Data Protection Act (Act XXVI of 2001), Amended March 22, 2002, November 15, 2002 and July 15, 2003. New Zealand: Privacy Act, May 1993; Privacy Amendment Act, 1993; Privacy Amendment Act, 1994. Norway: Personal Data Act (April 2000) - Act of 14 April 2000 No. 31 Relating to the Processing of Personal Data (Personal Data Act). Philippines: No general data protection law, but there is a recognized right of privacy in civil law. Poland: Act of the Protection of Personal Data (August 1997). Singapore: The E-commerce Code for the Protection of Personal Information and Communications of Consumers of Internet Commerce. Slovak Republic: Act No. 428 of 3 July 2002 on Personal Data Protection. Slovenia: Personal Data Protection Act , RS No. 55/99. South Korea: The Act on Promotion of Information and Communications Network Utilization and Data Protection of 2000. Spain: ORGANIC LAW 15/1999 of 13 December on the Protection of Personal Data. Switzerland: The Federal Law on Data Protection of 1992. Sweden: Personal Data Protection Act (1998:204), October 24, 1998. Taiwan: Computer Processed Personal data Protection Law - applies only to public institutions. Thailand: Official Information Act (1997) for state agencies ( Personal data Protection bill under consideration). Vietnam: The Law on Electronic Transactions (Draft: Finalized in 2006).374 © 2009 DAMA International

AppendixA10.2 United States Privacy Laws: Americans with Disabilities Act (ADA). Cable Communications Policy Act of 1984 (Cable Act). California Senate Bill 1386 (SB 1386). Children's Internet Protection Act of 2001 (CIPA). Children's Online Privacy Protection Act of 1998 (COPPA). Communications Assistance for Law Enforcement Act of 1994 (CALEA). Computer Fraud and Abuse Act of 1986 (CFAA). Computer Security Act of 1987 - (Superseded by the Federal Information Security Management Act (FISMA). Consumer Credit Reporting Reform Act of 1996 (CCRRA) - Modifies the Fair Credit Reporting Act (FCRA). Controlling the Assault of Non-Solicited Pornography and Marketing (CAN- SPAM) Act of 2003. Electronic Funds Transfer Act (EFTA). Fair and Accurate Credit Transactions Act (FACTA) of 2003. Fair Credit Reporting Act. Federal Information Security Management Act (FISMA). Federal Trade Commission Act (FTCA). Driver's Privacy Protection Act of 1994. Electronic Communications Privacy Act of 1986 (ECPA). Electronic Freedom of Information Act of 1996 (E-FOIA). Fair Credit Reporting Act of 1999 (FCRA). Family Education Rights and Privacy Act of 1974 (FERPA; also known as the Buckley Amendment). Gramm-Leach-Bliley Financial Services Modernization Act of 1999 (GLBA). Privacy Act of 1974. Privacy Protection Act of 1980 (PPA). Right to Financial Privacy Act of 1978 (RFPA). Telecommunications Act of 1996. Telephone Consumer Protection Act of 1991 (TCPA). Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism Act of 2001 (USA PATRIOT Act). Video Privacy Protection Act of 1988.© 2009 DAMA International 375

DAMA-DMBOK GuideA10.3 Industry-Specific Security and Privacy Regulations:Financial Services: Gramm-Leach-Bliley Act (GLBA), PCI Data SecurityStandard.Healthcare and Pharmaceuticals: HIPAA (Health Insurance Portability andAccountability Act of 1996) and FDA 21 CFR Part 11.Infrastructure and Energy: FERC and NERC Cybersecurity Standards, theChemical Sector Cyber Security Program and Customs-Trade Partnershipagainst Terrorism (C-TPAT).Federal Government: FISMA and related NSA Guidelines and NISTStandard.A10.4 StandardsANSI/EIA859 : Data Management.AS 4390-1996 Records Management.CAN-SPAM - Federal law regarding unsolicited electronic mail.FCD 11179-2, Information technology—Specification and standardization of dataelements - Part 2: Classification for data elements.ISO 1087, Terminology—Vocabulary.ISO 15489-1:2001 Records Management—Part 1: General.ISO 2382-4:1987, Information processing systems—Vocabulary part 4.ISO 2788:1986 Guidelines for the establishment and development of monolingualthesauri.ISO 704:1987, Principles and methods of terminology.ISO Standards Handbook 10, Data Processing—Vocabulary, 1982.ISO/IEC 10241:1992, International Terminology Standards—Preparation andlayout.ISO/IEC 11179-3:1994, Information technology—Specification andstandardization of data elements - Part 3: Basic attributes of data elements.ISO/IEC 11179-4:1995, Information technology—Specification andstandardization of data elements - Part 4: Rules and guidelines for theformulation of data definitions.ISO/IEC 11179-5:1995, Information technology—Specification andstandardization of data elements - Part 5: Naming and identification principlesfor data elements.ISO/IEC 11179-6:1997, Information technology—Specification andstandardization of data elements - Part 6: Registration of data elements.ISO/TR 15489-2:2001 Records Management -- Part 2: Guidelines.376 © 2009 DAMA International