A CFO discovers three sales totals from three departments for the same quarter, each pulled from a different system, each off by a few percent. The fix is not another reconciliation spreadsheet. The fix is a data governance program that names owners, sets standards, and runs the data life cycle the same way every time.
Data governance is the framework of decision rights, accountabilities, and standards that defines how an organization treats data as an asset. It answers who owns each data element, who can change it, and what quality level it must meet. Data management is the operational execution: capturing, storing, integrating, securing, and serving the data under the policies governance has set. Governance is policy and oversight. Management is process and tooling.
A governance framework provides scaffolding: roles, processes, standards, and metrics. Public reference structures include DAMA-DMBOK (the Data Management Body of Knowledge, organized around eleven knowledge areas), DCAM (Data Management Capability Assessment Model), and COBIT (which embeds data governance inside broader IT governance).
Common mistakes
- Calling governance the same as management. Governance sets policy; management executes it. Setting a quality standard is governance; enforcing it day to day is management.
- Reordering preprocessing. Cleaning before consolidating wastes effort on records that will get merged or dropped. The correct order is consolidate, clean, transform, reduce.
- Conflating penetration testing with vulnerability testing. Scans enumerate known weaknesses by checking configurations. Penetration tests exploit weaknesses to prove impact. Programs run both.
Bottom line
- Data governance sets policies and accountabilities; data management executes them day to day
- A governance framework defines roles, policies, processes, and metrics; common references are DAMA-DMBOK and COBIT
- Eight life cycle stages: capture, maintenance, synthesis, usage, analytics, publication, archival, purging (synthesis before usage, archival before purging)
- Preprocessing order: consolidation, cleaning, transformation, reduction
Exam shortcut
When the question asks whether something is governance or management, ask "is it a policy decision or an operational task?" Policy is governance; execution is management. When preprocessing steps appear out of order in the answer choices, anchor on consolidation first and reduction last. Cleaning and transformation always sit in the middle.
The full lesson (about 1,730 words, 12 min read) adds 2 worked examples, all 6 common mistakes, a self-check, free in the app.
Learning objectives
- 1F2
Browse all free CMA Part 1 lessons or jump into free CMA Part 1 practice questions.