Standards and Policies
Develop and communicate standards and policies for information management (including data definitions, taxonomies, models, usage patterns, archiving policies and schedules, information policies, roles and rights), and key process indicators (such as service levels for all data and information-based services, and cost of ownership).
Improvement Planning
Practices-Outcomes-Metrics (POM)
Representative POMs are described for Standards and Policies at each level of maturity.
- 2Basic
- Practice
- Develop consistent policies and standards.
- Outcome
- Policies and standards are being developed and their application improves data quality.
- Metric
- # of policies and standards mapped to generic requirements of business units.
- 3Intermediate
- Practice
- Consistently apply existing policies and standards.
- Outcome
- Policies and standards are applied in IT and some business units effectively and efficiently, thus, reducing costs, mistakes, rework, and customer issues.
- Metric
- # of policies and standards mapped to generic requirements of business units.
- 4Advanced
- Practice
- Design development processes so that policies and standards are incorporated.
- Outcome
- New and updated solutions incorporate the applicable policies and standards and facilitate compliance with audit logs and automated controls.
- Metric
- # of policies and standards mapped to requirements of business units that are based on a central and mature, but manual, internal development process.
- Practice
- Conduct periodic reviews and improvement cycles.
- Outcome
- Improvements generate better savings and show value for the investment.
- Metrics
- Frequency of reviews (as appropriate).
- # of improvements based on reviews.
- 5Optimized
- Practice
- Determine policies and standards based on evolving strategic, risk, and technical factors.
- Outcome
- Policies and standards are effective and efficient across the business ecosystem.
- Metric
- # of implemented internal policies and standards that are mapped to the requirements of all business units and are based on organization/external standards.
- Practice
- Facilitate the automation of the application of policies and standards based on agreed risk tolerance factors and external recognized standards.
- Outcome
- Policies and standards are effective and efficient across the business ecosystem.
- Metric
- # of implemented internal policies and standards that are automated.