ISO 8000: An ISO framework for data governance

British Computer Society Wolverhampton Branch Meeting University of Wolverhampton 2016-04-14 ISO 8000: An ISO framework for data governance Dr. Timothy M. KING IKM Principal Consultant Babcock Analytic Solutions tim.king@babcockinternational.com

An ISO framework for data governance the perils of data quality an assured decision capability the ISO 8000 framework the benefits of a standards-based approach 2

An ISO framework for data governance the perils of data quality an assured decision capability the ISO 8000 framework the benefits of a standards-based approach 3

The perils of data quality Mars Climate Orbiter http://news.bbc.co.uk/1/hi/sci/tech/455807.stm American Airlines http://www.bbc.co.uk/news/technology-32513066 Network Rail http://www.bbc.co.uk/news/business-30130138 Volkswagen http://www.bbc.co.uk/news/world-us-canada-34298259? 4

An ISO framework for data governance the perils of data quality an assured decision capability the ISO 8000 framework the benefits of a standards-based approach 5

Assured decision capability governance doing right things data generate collect transform retain retrieve disseminate dispose quality data enable effective & efficient decision making decisions right decisions by right people at right times right decisions enable right actions to deliver right objectives organisational objectives e.g. profit health & safety regulatory compliance customer satisfaction information technology (products & services) processes, people & organisation understanding & management of risk doing things right assurance

An ISO framework for data governance the perils of data quality an assured decision capability the ISO 8000 framework the benefits of a standards-based approach 7

data = product alignment to ISO 9000 ISO 8000 quality = conformance to requirements plan, do, check, act processes, people & technology 8

ISO 8000 Systematic & systemic data quality Plan & perform decision making within processes across organisation data "re-interpretable representation of information in a formalized manner suitable for communication, interpretation, or processing ISO/IEC 2382-1:1993 information need Analyse requirements & design data life cycle Provide technology & services data specification work instructions Plan, assure & improve data quality data that meet requirements Execute & monitor data life cycle Control data quality Provide human resources Perform data quality management information "knowledge concerning objects, such as facts, events, things, processes, or ideas, including concepts, that within a certain context has a particular meaning ISO/IEC 2382-1:1993 Identify strategic objectives of organisation & commitment from senior management 9

ISO 8000 Systematic & systemic data quality Plan & perform decision making within processes across organisation current status information need Analyse requirements & design data life cycle data specification work instructions Plan, assure & improve data quality data that meet requirements Execute & monitor data life cycle Control data quality 9 parts published 15 parts under development Provide technology & services Provide human resources Perform data quality management Identify strategic objectives of organisation & commitment from senior management 10

ISO 8000 Systematic & systemic data quality Plan & perform decision making within processes across organisation validation ISO 8000-8 information need Analyse requirements & design data life cycle syntactic, semantic & pragmatic quality data specification work instructions Plan, assure & improve data quality data that meet requirements verification Execute & monitor data life cycle Control data quality Information & data quality: Concepts & measurement Provide technology & services Provide human resources Perform data quality management Identify strategic objectives of organisation & commitment from senior management 11

ISO 8000 Systematic & systemic data quality Plan & perform decision making within processes across organisation ISO 8000-100 series information need computer-processable Analyse requirements & design data life cycle Provide technology & services data specification work instructions Plan, assure & improve data quality data that meet requirements with statements of provenance, accuracy & completeness Execute & monitor data life cycle Control data quality Provide human resources Perform data quality management Master data: Exchange of characteristic data Identify strategic objectives of organisation & commitment from senior management 12

ISO 8000 Systematic & systemic data quality Plan & perform decision making within processes across organisation ISO 8000-60 series information need Analyse requirements & design data life cycle data specification work instructions Plan, assure & improve data quality data that meet requirements Execute & monitor data life cycle Control data quality Data quality management process assessment Provide technology & services Provide human resources Perform data quality management maturity model approach Identify strategic objectives of organisation & commitment from senior management 13

ISO 8000 Systematic & systemic data quality Plan & perform decision making within processes across organisation ISO 8000-150 information need Analyse requirements & design data life cycle data administrator data specification work instructions Plan, assure & improve data quality data that meet requirements Execute & monitor data life cycle Control data quality data technician Quality management framework Provide technology & services data manager Provide human resources Perform data quality management Identify strategic objectives of organisation & commitment from senior management 14

Global best practice rail (GBR, DEU) defence (GBR, NOR) maritime (NOR) manufacturing (SWE) mining (USA, ZAF) nuclear power (FRA) healthcare (ESP) oil & gas (Middle East) finance (KOR) automotive (JPN)

2015 Babcock International 20 November 2014 The regulator said the company had completed less work than it planned to do, including maintaining the track, and said there was a lack of reliable data on what work it had done.

Data quality as a corporate risk content of ISO 8000-150 system model bowtie model corporate risk register nine lower level processes for managing data quality requirement specification threat consequence RACI failure modes hazardous event controls mitigations quantified impact of data quality on safe, effective & efficient operations

Train asset characteristics maximum speed 125 mph but HS1 can do 140 mph reliability 97.8 % but why not 100% location Carlise but I want it in London asset performance passengers carried measured in Jan 2016 126,583 unavailable for passenger service predicted for Feb 2016 3 days customer complaints target for Mar 2016 7 per 1,000,000 passenger miles

Data data characteristics spelling mistakes in name fields 1 in 100, 1 in 1000? number of decimal places 3, 4, 5? frequency of fuel flow reading once a day, once an hour, once a second? data performance incorrect invoice values revenue & reputation identify out-of-tolerance raw material eliminate cost of unproductive processing predict need to replace pump availability of parent system & customer satisfaction

An ISO framework for data governance the perils of data quality an assured decision capability the ISO 8000 framework the benefits of a standards-based approach 21

The benefits of a standards-based approach X development of own approach failure of approach data generate collect transform retain retrieve disseminate dispose quality data enable data effective & generate collect efficient transform retain decision retrieve disseminate making decisions right decisions by right decisions people at right times governance right decisions enable right e.g. profit actions to regulatory deliver compliance right customer objectives doing right things assured decision capability dispose doing things right assurance quality data enable effective & efficient decision making right decisions by right people at right times governance right decisions enable right actions to deliver right objectives information technology (products & services) organisational objectives e.g. profit health & safety regulatory compliance customer satisfaction information technology (products & services) processes, people & organisation understanding & management of risk ISO 8000 = proven best practice doing things right assurance ISO 8000 doing right things organisational objectives health & safety satisfaction processes, people & organisation understanding & management of risk X alignment & interoperability with partners, customers, suppliers, regulators independent certification 22

An ISO framework for data governance Dr. Timothy M. KING IKM Principal Consultant Babcock Analytic Solutions tim.king@babcockinternational.com