This "information factory" takes in prescription and other medical information from many sources and produces knowledge products that are used by insurance companies, pharmaceuticals, and others. With many Data Quality resources and mature processes, the company had a strong reputation and respected products.
But it needed more. HIPAA requirements meant that it needed to introduce proof of enhanced access management controls. Contractual requirements required even stricter controls and a documentation of data flows. The company concluded that the time was right for a metadata repository and governance of both metadata and data.
Two separate sets of circumstances further complicated matters: the company was up for sale, and the CIO wanted to outsource some of its IT operations. The Data Governance program would need to address the current environment and also these new developments.
A major Systems Integrator was brought in to help plan and execute these capabilities, along with a resource from the Data Governance Institute to help this blended team. Together, we implemented a formal Data Governance and Stewardship program while helping align governance, risk, compliance, privacy, and operational efforts.
We helped inventory existing controls and map them to both data flows and standard operating procedures. Governance bodies were established. New stewardship accountabilities were formalized and incorporated into job functions. The new metadata repository was modified to store governance, risk, compliance, and controls information. Formal proactive processes and reactive processes were put in place, and all technical and business resources who worked with in-scope data were introduced to new Change Management protocols and processes.
Copyright 2004-2008 The Data Governance Institute, LLC. All Rights Reserved The site is brought to you in partnership with the Business Intelligence Network
