Data Governance

CIMP · 50 questions

• A city manager asks whether standing up data governance mainly means buying a catalog tool. How should the information management lead define data governance?
• A county board wants a data governance program after hearing conference slogans that 'data is the new oil.' What business rationale should the DG lead emphasize instead?
• Two agencies share a client index but never agreed who owns definitions and quality expectations. Which governance gap should they close first?
• Department heads appoint data stewards by name but allocate no hours for stewardship duties. What does this reveal about the stewardship model?
• A draft policy bans all cloud storage with no exceptions process. What policy-design problem should the governance council flag?
• Leaders treat a one-project warehouse steering committee as the organization's data governance council. What distinction should the IM lead draw?
• Executives sponsor a data governance kickoff then disappear from subsequent forums. Which success factor is missing?
• Staff describe data governance as 'the data police' and resist engagement. What cultural approach should the program take?
• A team skips a privacy review because the personal data will only be used internally. What should governance require?
• Retention schedules exist on paper, yet production systems never delete or archive expired records. What gap should DG close?
• A resident asks what personal data the city holds about them. Which governance capability should respond?
• A proposal would reuse school free-lunch eligibility lists for unrelated city marketing outreach. Beyond checking a legal checkbox, what should data ethics guidance emphasize?
• A RACI for critical data elements leaves the Accountable cell blank for three systems. What design flaw does this create?
• IT is about to approve a new SaaS that creates another customer master with no integration plan. How should data governance influence the intake?
• A cataloging project auto-scrapes technical schemas but assigns no ownership for business glossary terms. What balance should the team restore?
• Program metrics celebrate how many policies were published, ignoring adoption and defect trends. What measurement shift should leadership make?
• The city proposes organizing stewardship around data domains such as customer, location, and asset. What operating-model idea does this apply?
• Security demands lock-down of all datasets while analysts need broader access for service insights. How should governance mediate?
• Consultants urge a small town to copy a large bank's full governance operating model unchanged. What principle should the town apply?
• Stewards escalate issues ad hoc because no path from steward to domain owner to council is defined. What governance design element is missing?
• A quality policy states that 'all data must be perfect' with no thresholds or measures. How should DG improve the standard?
• Council KPIs are pulled from unmanaged shadow spreadsheets instead of known systems of record. What should data governance require?
• New employees never receive data-handling expectations during onboarding. Which culture control should the program add?
• Two agencies share data without agreements on permitted use, quality expectations, or privacy constraints. What artifact should governance require?
• Council asks data governance to 'guarantee AI is safe' while the city still lacks a data inventory and quality baselines. What scoping response is appropriate?
• A city data council debates whether business stewards or technical stewards alone can own parcel-attribute quality. What should the council recognize?
• A department director verbally waived a retention rule for a one-off research extract, and months later no one can prove what was allowed. What should governance require for exceptions?
• An agency still fights daily data fires with unclear ownership, yet a consultant proposes enterprise-wide federated governance platforms first. How should leaders sequence the work?
• Workshops teach staff how to read dashboards, but creators still enter incomplete case fields with no training. What literacy gap remains?
• The agency published public, internal, and confidential labels, but systems still treat every field the same. What is missing?
• Business units want local flexibility, while enterprise risk needs common guardrails. Which governance pattern fits?
• After a major permitting system replacement, auditors find access and retention policies still describe the retired platform. What operating practice was missing?
• Cleaner parcel-owner addresses cut returned mail and failed foreclosure notices. How should the governance team frame this outcome?
• Utility outage systems hold wrong emergency contact numbers for critical facilities. How should governance prioritize?
• Cross-department working groups discuss standards weekly, yet no body can approve a conflicting definition. What structural gap exists?
• Metadata stewardship is assigned, but no role owns physical deletion when retention expires. What accountability gap should leaders close?
• A quick-win data catalog launches, but users who spot bad values have no path into the data-quality issue process. What integration is missing?
• Departments refuse to share glossary definitions, fearing loss of control over “their” data. What should the deploy approach emphasize?
• Leaders want enterprise-wide governance in the first quarter across every dataset. What success factor should temper that plan?
• Counsel asks which reports and datasets fall under a new state privacy act. What prerequisite must governance complete first?
• Privacy leads propose a register of higher-risk data processing activities for resident casework systems. What practice does this support?
• Staff are unsure whether the ethics board or the data governance council decides a disputed algorithmic scoring use case versus a routine field standard. What should leaders clarify?
• A team installs a free website analytics plugin that sends resident interaction data to a vendor, skipping data-processing agreement review. What governance expectation applies?
• The program dashboard currently shows only training-seat counts. Which operating metric better indicates governance health?
• Teams request new data products through informal chats, causing surprise compliance gaps. What enablement practice helps?
• Several local governments will share a regional homeless-services dataset. What sharing-governance control is most essential?
• A breach tabletop drill shows unclear ownership for external communications and evidence preservation. What should governance strengthen with security and legal?
• Finance, sales, and service each use a different definition of “active customer,” breaking executive metrics. What should governance do?
• A temporary task force writes twenty policies in a month, then disbands with no owners for reviews or exceptions. What lesson applies?
• Before buying additional governance tools, what foundational sequence should the program complete?