Data Management

Data Management is one of the important tasks assigned to the Governance, Risk & Compliance office. The GRC team focuses on maintaining the University’s data registers, data classification, data risk assessment, and data retention controls for facilitating data security, accessibility, and usability to the authorised stakeholders. 

The GRC team consists of Data Officers and Data Stewards reporting to the Manager, Governance, Risk & Compliance, working on Data management and other aspects of governance and risk assessment related to the information, systems, and technology at LUMS.

Our Team

The roles and responsibilities of the data management team are as follows:

Data Officers (DO)

Data Officers focus on implementing and developing enterprise-level data definitions and data management standards across the assigned business areas. The DO is accountable for:

• Strategic coordination of data management and reporting.
• Oversee the establishment of data management policies and processes.
• Handle and manage the assigned Data stewards.
• Serve as an escalation point for problem/policy resolution.
• Identify the sensitivity and criticality of the data. Ensure that appropriate business processes are in place to keep the data secure, maximize data accuracy, and ensure that responsible staff is trained to maintain data quality.
• Coordinating between the data owners, data stewards, and data custodians.
   

Data Stewards (DS)

Data Stewards are functional leads within an operational area who have been deemed data domain experts and have oversight for a subset of the University’s data. Data source system stewards will provide expert guidance and design of appropriate use and access.
 

Data Custodian (DC)

The Data Custodian manages the technological environment where data resides and ensures safe custody, transport, and storage. DC is responsible for the:

• Make sure that the systems listed in the Register of Systems are available.
• The Data Custodian may suggest systems to the data governance committee.
• The data custodian may provide advice to the data governance committee on the development of processes.
• Safety, security, availability, patching, maintenance, and administration of the systems listed in the Register of Systems.
• Availability, integrity, confidentiality, backup, recovery, archiving, and deletion of data as per the university’s policies.
• Maintenance of the Register of systems approved for the management of university data.