Enterprise Data Governance Operating Model

Replace {{PLACEHOLDERS}} with your environment values, then deploy to your stack.

# Enterprise Data Governance Operating Model

**Version:** {{FRAMEWORK_VERSION}}  
**Owner:** {{CHIEF_DATA_OFFICER}} / {{GOVERNANCE_TEAM}}  
**Last Updated:** {{LAST_UPDATED_DATE}}  
**Organization:** {{ORGANIZATION_NAME}}

---

## Executive Summary

This document defines the **enterprise data governance operating model** for {{ORGANIZATION_NAME}}. It establishes RACI matrices, stewardship structures, catalog standards, data classification, access review processes, and change management so data is **trusted, compliant, discoverable, and appropriately protected** across all domains.

**Governance mission:**

> Enable safe, efficient use of data assets while meeting regulatory obligations ({{REGULATORY_FRAMEWORKS}}) and internal risk appetite.

---

## 1. Governance Framework Overview

```
┌─────────────────────────────────────────────────────────────────┐
│              EXECUTIVE DATA GOVERNANCE COUNCIL (EDGC)           │
│         Strategy, policy approval, risk appetite, funding       │
└────────────────────────────┬────────────────────────────────────┘
                             │
┌────────────────────────────┴────────────────────────────────────┐
│              DATA GOVERNANCE OFFICE (DGO)                        │
│    Standards, catalog ops, metrics, training, tool administration│
└────────────────────────────┬────────────────────────────────────┘
                             │
        ┌────────────────────┼────────────────────┐
        ▼                    ▼                    ▼
┌───────────────┐   ┌───────────────┐   ┌───────────────┐
│ DOMAIN        │   │ DOMAIN        │   │ DOMAIN        │
│ STEWARD COMM. │   │ STEWARD COMM. │   │ STEWARD COMM. │
│ (Finance)     │   │ (Customer)    │   │ (Operations)  │
└───────────────┘   └───────────────┘   └───────────────┘
        │                    │                    │
        └────────────────────┼────────────────────┘
                             ▼
              Data Owners, Stewards, Custodians
                             │
                             ▼
              Catalog, Policies, Access Controls
```

---

## 2. Roles and RACI

### 2.1 Role Definitions

| Role | Description | Typical Title |
|------|-------------|---------------|
| **Executive Sponsor** | Accountable for enterprise data strategy | CDO, CIO |
| **Data Owner** | Accountable for a domain's data assets and access decisions | VP / Director of domain |
| **Data Steward** | Operational governance for definitions, quality, catalog | Business analyst, domain SME |
| **Data Custodian** | Technical implementation of policies | Data engineer, DBA |
| **Data Consumer** | Uses data per granted entitlements | Analyst, data scientist |
| **Privacy Officer** | DPA, DPIA, privacy compliance | DPO, legal counsel |
| **Security Officer** | IAM, encryption, threat model | CISO team |
| **Governance Analyst** | Metrics, access reviews, training | DGO staff |

### 2.2 Enterprise RACI Matrix

| Activity | Exec Sponsor | Data Owner | Data Steward | Custodian | DGO | Privacy | Security |
|----------|:------------:|:----------:|:------------:|:---------:|:---:|:-------:|:--------:|
| Enterprise data strategy | A | C | I | I | R | C | C |
| Classification taxonomy | A | C | C | I | R | C | C |
| Domain glossary terms | I | A | R | C | C | I | I |
| Access grant approval | I | A | R | C | I | C | C |
| Technical access implementation | I | I | C | R | C | I | A |
| Quality standards | I | A | R | R | C | I | I |
| Catalog curation | I | A | R | C | R | I | I |
| Access recertification | I | A | R | C | R | C | C |
| Regulatory reporting | A | R | C | C | R | R | C |
| Policy exception / waiver | A | R | C | I | R | C | C |
| Incident (data breach) | I | C | C | R | C | A | R |

// ... download full template for remaining code