Data Governance Practices Assessment Survey

Department of Information and Communications Technology

Data Governance Practices Assessment Survey

Please complete the survey questions and submit once all sections are complete.

Please enable JavaScript in your browser to complete this form.

1Section

Data governance refers to the overall management of the availability, usability, integrity, and security of data within an organization from its start to the end.

Particular Details

Organization/Agency Name *

Layout

Name of Officer *

Role/Position *

Email *

Phone

Part 1: Data Governance

1. How would you rate your organization's current data governance practices?

Excellent
Good
Fair
Poor
Not sure

2. Does your organization have a designated data governance team, section, or officer?

Please select appropriately.

Team
Section
Officer

3. Do you have any Internal Policy, Strategy or Data Standards inplace?

Yes
No
Not sure

4. How often does your organization conduct data governance reviews and audits?

Regularly
Occassionally
Rarely
Not sure

Part 2: Data Protection

5. What measures does your organization have in place to protect sensitive data( Select more if applicable)

Encryption
Access Control
Data masking/anonymization
Regular security assessments
Other

Please specify the other measures.

Part 3: Data Collection Methods

6. What data collection methods does your organization use? (Select more if applicable)

Surveying and Questionnaire
Collection in Person
Collection on Forms
Web Scraping
Social Media Monitoring
Document Analysis
Research Institution (Please specify)
Public Available sources (Please specify)
Others (specify)

Specify the Research Institution.

Specify the Public Sources

Specify the other collections methods.

Part 4: Storage Infrastructure

7. What type of storage infrastructure does your organization use to store data? ( Select many if applicable)

On-premises servers
Cloud storage
Hybrid storage
Database storage
File system storage
Remote data storage
Other

Specify other type of storage infrastructure.

8. Which cloud service providers are currently responsible for managing your data? Tick any if apply.

Amazon Web Services (AWS)
Microsoft Azure Second Choice
Google Cloud Platform (GCP)
IBM Cloud
Oracle Cloud
Alibaba Cloud
Salesforce Cloud
VMware Cloud
Digital Ocean
Rackspace
Other

Specify other cloud service provider.

Part 5: Data Retention and Archiving

9. Do you have a policy/guideline for data retention and archiving?

Yes
No
Not sure

Part 6: Backup and Disaster Recovery

10. Do you have backup procedures in place for critical data?

Yes
No
Not sure

11. How often are backups performed?

Weekly
Monthly
Yearly
Other

Specify rate of backups.

12. Where are backup copies stored? Select any if applicable.

On-premises data centre
Offsite data centre (different geographic location)
Cloud storage (e.g., AWS, Azure, Google Cloud)
External hard drives or storage devices
Other

Specify backup copies are stored.

Part 7: Data Security Measures

13. What security measures are implemented to protect stored data? (Select any if applicable)

Encryption
Access controls
Monitoring
Other

Specify the other security measures.

14. How does your organization manage data security? Select any if applicable

Firewall and network security
Endpoint security
Security training and awareness programs
Incident response procedures
Other

Specify other data security.

Part 8: Data Sharing

15. How is public data shared by your organization? Select all applicable methods.

Published on a public website or data portal
Distributed through open data platforms
Shared via APIs (Application Programming Interfaces) for external access
Made available for download in standardized formats (e.g., CSV, JSON)
Utilized by third-party applications or services
Integrated into government or industry databases
Shared with research institutions or academia
Other

Specify other ways public data is shared.

Part 9: Data Sharing Guidelines

16. Does your organization have guidelines or policies for sharing data with external parties?

Yes
No
Not sure
Partial guidelines
Other

Specify other.

17. How is data ownership defined within your organization? Tick which applies

Data ownership is clearly defined for each department or business unit.
Data ownership is assigned to specific individuals or roles within the organization.
Data ownership is not clearly defined or understood within our organization.
Data ownership is shared among relevant stakeholders across departments.
Other
Not sure

Specify other.

18. Does your organization classify data based on sensitivity and importance?

Yes, according to a formal classification policy
Yes, informally based on business needs
No formal classification processes
Other

Specify other.

Part 10: Compliance and Regulatory Requirements

19. How does your organization ensure compliance with data protection regulations and industry standards in data storage? Tick any if applicable.

Regular compliance audits
Implementation of data protection policies and procedures
Data privacy impact assessments
Other

Specify other.

20. Are there specific regulations or standards that impact your data storage practices? Tick any if applicable

GDPR (General Data Protection Regulation)
HIPAA (Health Insurance Portability and Accountability Act)
PCI DSS (Payment Card Industry Data Security Standard)
Other
Not sure

Specify other.

Part 11: Storage Costs and Optimization

21. How does your organization optimize storage costs while meeting data storage requirements? Tick any if applicable.

Data duplication and compression
Tiered storage solutions based on data usage patterns
Cost analysis and optimization strategies
Other
Not sure

Specify other.

22. Are there initiatives in place to reduce storage overhead and improve efficiency?

Storage capacity planning
Retirement of unused data
Implementation of data lifecycle policies
Other
Not sure

Specify other.

Part 12: Data Accessibility and Availability

23. How is data accessibility ensured for authorized users across different locations or departments?

Global content delivery networks (CDNs)
Replication of data across multiple data centres
VPN and secure remote access solutions
Other

Specify other.

24. What measures are in place to maintain data availability and minimize downtime?

High availability (HA) clustering
Disaster recovery (DR) planning and failover systems
SLA-backed uptime guarantees
Other

Specify other.

Part 13: Data Lifecycle Management

25. What is the approach to managing the entire data lifecycle from creation to disposal?

Data classification and retention policies
Automated data archiving and deletion processes
Legal hold procedures for data preservation
Other

Specify other.

Part 14: Primary Data Owner

26. Do you serve as the primary owner of specific datasets within your organization?

Yes
No
Not sure

Part 15. Data Handled by your department

27. What types of data does your department primarily deal with? Please select all that apply.

Primary Data: Raw or original data collected firsthand for specific purposes.
Secondary Data: Existing data that has been collected, processed, and used for other purposes.
Structured Data: Data organized into a predefined format (e.g., databases, spreadsheets).
Unstructured Data: Data that does not have a predefined data model or organization (e.g., text documents, images, videos).
Personal Data: Data related to individuals, including personally identifiable information (PII).
Business Data: Data related to organizational operations, such as sales, financial transactions, and customer interactions.
Technical Data: Data related to IT systems, networks, and infrastructure.
Research Data: Data collected for research purposes, including scientific studies and experiments.
Public Data: Data that is publicly available and accessible (e.g., government data, open datasets).
Other