Standards, Policies, and Controls
Identifies and reviews applicable legislation and standards, and develop and implement compliant policies and controls for the management of information.
Capability Building Blocks
- B1Standards and Policies
- Develop and communicate standards and policies for information management (including data definitions, taxonomies, models, usage patterns, archiving policies and schedules, information policies, roles and rights), and key process indicators (such as service levels for all data and information-based services, and cost of ownership).
- B2Controls
- Establish a control framework for information management, which may include ways to monitor effectiveness and efficiency, manage change, and control access, as well as guidance on data and information use.