A strategic, “top-down” program in which
leadership communicates the levels of risk pertaining to data that they are
willing to assume.
Includes development and enforcement of
standards and processes.
Requires broad understanding of upstream and
downstream stakeholders, systems, and processes for all decisions and
A tactical, “bottom-up” program in which individuals
perform day-to-day activities pertaining to data.
Includes creating, maintaining, using, and
deleting data per standards.
Requires deep understanding of a particular
set of data.