Data

Teams decide for themselves how to store and use data.

Teams follow our organisation’s policies on data storage and usage.

We inventory and classify all our data

We inventory and classify all our data and review this often. We understand how data moves through our systems but this isn’t always documented.

We have a catalogue describing all out data, its quality, use and origins.

I don't know

We have policies and everyone knows them.

Teams must show they follow our policies.

We check that we’re following policy and fix any problems we find.

We follow policy, make checks and record exceptions in a central risk register.

We follow policy and use automated cloud tools to check that we do.

I don't know