ISO 8000: An ISO framework for data governance

British Computer Society Wolverhampton Branch Meeting
University of Wolverhampton
2016-04-14
ISO 8000: An ISO framework for data governance
Dr. Timothy M. KING
IKM Principal Consultant
Babcock Analytic Solutions
[email protected]
© 2015 Babcock International
An ISO framework for data governance
•the perils of data quality
•an assured decision capability
•the ISO 8000 framework
•the benefits of a standards-based approach
2
© 2015 Babcock International
An ISO framework for data governance
•the perils of data quality
•an assured decision capability
•the ISO 8000 framework
•the benefits of a standards-based approach
3
© 2015 Babcock International
The perils of data quality …
Mars Climate Orbiter
http://news.bbc.co.uk/1/hi/sci/tech/455807.stm
American Airlines
http://www.bbc.co.uk/news/technology-32513066
Network Rail
http://www.bbc.co.uk/news/business-30130138
Volkswagen
…?
http://www.bbc.co.uk/news/world-us-canada-34298259
4
© 2015 Babcock International
An ISO framework for data governance
•the perils of data quality
•an assured decision capability
•the ISO 8000 framework
•the benefits of a standards-based approach
5
Assured decision capability
© 2015 Babcock International
governance
data
•
•
•
•
•
•
•
generate
collect
transform
retain
retrieve
disseminate
dispose
quality data
enable
effective &
efficient
decision
making
decisions
• right decisions
• by right people
• at right times
right
decisions
enable right
actions to
deliver right
objectives
doing right things
organisational
objectives
e.g.
• profit
• health & safety
• regulatory
compliance
• customer
satisfaction
information technology (products & services)
processes, people & organisation
understanding & management of risk
doing things right
assurance
…
© 2015 Babcock International
An ISO framework for data governance
•the perils of data quality
•an assured decision capability
•the ISO 8000 framework
•the benefits of a standards-based approach
7
© 2015 Babcock International
data =
product
alignment to
ISO 9000
plan, do,
check, act
ISO
8000
quality =
conformance
to
requirements
processes,
people &
technology
8
© 2015 Babcock International
ISO 8000 – Systematic & systemic data quality
Plan & perform decision making within processes across organisation
data
"re-interpretable
representation of
information in a
formalized
manner suitable
for
communication,
interpretation, or
processing“
ISO/IEC
2382-1:1993
information
need
Analyse requirements &
design data life cycle
data
specification
work
instructions
data that meet
requirements
Execute & monitor
data life cycle
Control data quality
Plan, assure & improve data quality
Provide technology & services
Provide human resources
Perform data quality management
Identify strategic objectives of organisation & commitment from senior management
information
"knowledge
concerning
objects, such as
facts, events,
things, processes,
or ideas,
including
concepts, that
within a certain
context has a
particular
meaning“
ISO/IEC
2382-1:1993
9
© 2015 Babcock International
ISO 8000 – Systematic & systemic data quality
Plan & perform decision making within processes across organisation
information
need
current
status
Analyse requirements &
design data life cycle
data
specification
work
instructions
data that meet
requirements
Execute & monitor
data life cycle
Control data quality
Plan, assure & improve data quality
Provide technology & services
Provide human resources
• 9 parts
published
• 15 parts
under
development
Perform data quality management
Identify strategic objectives of organisation & commitment from senior management
10
© 2015 Babcock International
ISO 8000 – Systematic & systemic data quality
Plan & perform decision making within processes across organisation
information
need
ISO
8000-8
Analyse requirements &
design data life cycle
syntactic, semantic
& pragmatic quality
data
specification
work
instructions
validation
data that meet
requirements
verification
Execute & monitor
data life cycle
Control data quality
Plan, assure & improve data quality
Provide technology & services
“Information &
data quality:
Concepts &
measurement”
Provide human resources
Perform data quality management
Identify strategic objectives of organisation & commitment from senior management
11
© 2015 Babcock International
ISO 8000 – Systematic & systemic data quality
Plan & perform decision making within processes across organisation
information
need
ISO
8000100
series
computer-processable
Analyse requirements &
design data life cycle
data
specification
work
instructions
data that meet
requirements
with statements
Execute
& monitor
of provenance,
data life cycle
accuracy &
completeness
Control data quality
Plan, assure & improve data quality
Provide technology & services
“Master data:
Exchange of
characteristic
data”
Provide human resources
Perform data quality management
Identify strategic objectives of organisation & commitment from senior management
12
© 2015 Babcock International
ISO 8000 – Systematic & systemic data quality
Plan & perform decision making within processes across organisation
information
need
ISO
8000-60
series
Analyse requirements &
design data life cycle
data
specification
work
instructions
data that meet
requirements
Execute & monitor
data life cycle
Control data quality
Plan, assure & improve data quality
Provide technology & services
“Data quality
management
process
assessment”
Provide human resources
Perform data quality management
maturity
model approach
Identify strategic objectives of organisation & commitment from senior management
13
© 2015 Babcock International
ISO 8000 – Systematic & systemic data quality
Plan & perform decision making within processes across organisation
information
need
ISO
8000150
Analyse requirements &
design data life cycle
data administrator
data
specification
work
instructions
data that meet
requirements
Execute & monitor
data life cycle
data quality
dataControl
technician
Plan, assure & improve data quality
Provide technology & services
data manager
“Quality
management
framework”
Provide human resources
Perform data quality management
Identify strategic objectives of organisation & commitment from senior management
14
© 2015 Babcock International
Global best practice …
rail (GBR, DEU)
defence (GBR, NOR)
maritime (NOR)
manufacturing (SWE)
finance
(KOR)
nuclear
power (FRA)
healthcare
(ESP)
mining
(USA, ZAF)
oil & gas
(Middle East)
automotive
(JPN)
© 2015 Babcock International
20 November 2014 …
“The regulator said the company had completed less work than it
planned to do, including maintaining the track, and said there was
a lack of reliable data on what work it had done.”
© 2015 Babcock International
Data quality as a corporate risk
© 2015 Babcock International
content of
ISO 8000-150
• nine lower level
processes for
managing data
quality
system model
•
•
•
•
•
requirement
specification
threat
consequence
RACI
bowtie model
•
•
•
•
failure modes
hazardous event
controls
mitigations
corporate risk
register
• quantified
impact of data
quality on safe,
effective &
efficient
operations
© 2015 Babcock International
Train …
asset characteristics
asset performance
• maximum speed
• passengers carried
• reliability
• unavailable for passenger service
• location
• customer complaints
• 125 mph
• … but HS1 can do 140 mph
• 97.8 %
• … but why not 100%
• Carlise
• … but I want it in London
• measured in Jan 2016
• 126,583
• predicted for Feb 2016
• 3 days
• target for Mar 2016
• 7 per 1,000,000 passenger miles
© 2015 Babcock International
Data …
data characteristics
• spelling mistakes in name fields
• 1 in 100, 1 in 1000 … ?
• number of decimal places
• 3, 4, 5 … ?
• frequency of fuel flow reading
• once a day, once an hour, once a
second … ?
data performance
• incorrect invoice values
• revenue & reputation
• identify out-of-tolerance raw
material
• eliminate cost of unproductive
processing
• predict need to replace pump
• availability of parent system &
customer satisfaction
© 2015 Babcock International
An ISO framework for data governance
•the perils of data quality
•an assured decision capability
•the ISO 8000 framework
•the benefits of a standards-based approach
21
© 2015 Babcock International
The benefits of a standards-based approach
£X
development
of own
approach
↓
failure of
approach
governance
assured decision capability
data
•
•
•
•
•
•
•
generate
collect
transform
retain
retrieve
disseminate
dispose
quality data
enable
data
effective
&
• generate
• collect
efficient
• transform
• retain
decision
• retrieve
• disseminate
making
• dispose
decisions
• right decisions
• by rightdecisions
people
•
at
right
times
quality data
enable
effective &
efficient
decision
making
• right decisions
• by right people
• at right times
governance
doing right things
organisational
objectives
doing right things
right
organisational
decisions
objectives
enable
right
right
e.g.
decisions
• profit
actions to
enable right • health & safety
• regulatory
actions
to
deliver
right
compliance
deliver right
• customer
objectives
objectives
satisfaction
e.g.
• profit
• health & safety
• regulatory
compliance
• customer
satisfaction
information technology (products & services)
information
technology (products & services)
understanding & management of risk
processes, people & organisation
doing things right
assurance
processes, people & organisation
…
assurance
alignment &
interoperability
with partners,
customers,
suppliers,
regulators …
£↓
understanding & management of riskindependent
ISO 8000 = proven
best practice
ISO 8000
doing things right
£X
certification
…
22
An ISO
framework
for data
governance
Dr. Timothy M. KING
IKM Principal Consultant
Babcock Analytic Solutions
[email protected]