← Perspectives

Series · Two strategies, one estate · Part 6 of 7

data governance · system of record · data contracts · operations

A data governance that gets results (I)

What to separate and who answers: record against stream, rigor by consequence, each domain owns its data.

Estudio RGC · 5 min

This note is part of the series Two strategies over the same estate. We saw why the rigor of an accounting ledger chokes the operational stream. Here is the first half of a governance that can actually be put to run. The guiding idea: good governance is not the one that controls the most, it is the one that makes trustworthy data flow.

Separate the system of record from the operational stream. It is the distinction that orders everything else. The system of record needs rigor, immutability, auditability, and can be slower: it is the official truth that no one will be able to dispute afterward. The operational stream needs to flow at the speed of the field: timely, good enough, corrected downstream. Each has its regime. The sin is applying to the stream the rigor of the record, and the mirror sin is letting the fast stream pass itself off as an official record. You separate the two worlds, with a clear boundary of where and how an operational piece of data, once settled, is promoted to record.

Rigor by consequence. Not all data deserves the same control. A piece of data feeding a multimillion-dollar investment decision is not governed the same as one feeding an intraday tracking dashboard. The key is to classify data by how it is used and by the consequence of it being wrong, and apply rigor in proportion to that consequence. Treating everything with maximum rigor is not prudence, it is waste, and on top of that it trains people to dodge governance because they experience it as an indiscriminate obstacle. In a word, control is fit-for-purpose.

Governance that enables, and each domain owns its data. Governance's job is to make trustworthy data flow, not to stop the operation. That changes where responsibility lives. Ownership of the data has to sit in the domain that produces it, close to where the data is generated and where what it means is understood, not in a distant central committee that approves one ticket at a time. The central committee defines the rules of the game and measures them; the domain owner answers for its data. A centralized governance that becomes a bottleneck is a governance the organization will learn to avoid.

Data contracts between systems. A data contract is an explicit agreement at the interface between two systems: what schema the data has, what each field means, and what is guaranteed about its quality and its frequency. When the producer and the consumer agree on a contract, they decouple: each can evolve internally without breaking the other, as long as it respects what was agreed at the interface. It is the same standardized plug, now applied to data: you change the appliance without redoing the wiring. With the record separated from the stream and each domain owning its data, the other half remains: quality where it matters, progressive rigor, and traceability for analytics and for AI. It closes in the next note.

Glossary
System of record
The official, auditable source of a piece of data: accounting, assets, contracts. It needs rigor, immutability and traceability, and can afford to be slower because its value is that no one can dispute it afterward.
Operational data stream
The data flow that is born in the field and has to move at the speed of the operation: reports, sensor readings, progress, crew events. It is useful even when incomplete and is corrected downstream; demanding record-level rigor of it suffocates it.
Data contract
Explicit agreement at the interface between two systems on the data schema, the meaning of each field, and the quality and frequency guarantees. It decouples producer from consumer, so each can evolve internally without breaking the other.
Fit-for-purpose governance (by consequence)
A governance model that classifies data by how it is used and by the consequence of it being wrong, and applies rigor in proportion to that consequence. It avoids both the lack of control where the decision is grave and the pointless ritual where it is not.
Quality at the source
Validating the data where it is born, with simple rules and immediate feedback to whoever enters it. It costs far less than rebuilding quality downstream and is the cheapest way to keep an error from propagating.
Progressive rigor
A governance strategy that starts light, with visibility and contracts over the few highest-consequence flows, and adds control where the consequence justifies it. It is the opposite of a total program that tries to govern everything at once and never finishes.
Vendor lock-in
A situation in which the operation ends up tied to the roadmap, prices and timelines of a single vendor or platform, because it bet everything on it. Standardizing the connective tissue instead of the application is what preserves optionality and avoids being held hostage.
Connective tissue
The set of connections through which the pieces of the ecosystem talk to each other: interfaces, identity, data contracts, observability. Standardizing the connective tissue, and not the application, is what lets you change any piece without redoing the whole.
AS-IS (current state)
The honest map of how the application estate stands today: what exists, what is obsolete, what depends on what. The real starting point, unretouched.
TO-BE (target state)
The direction the ecosystem is meant to be taken in, drawable and debatable, corrected as you go. Not a fixed snapshot, but a firm heading.

The change implementation that drives your operation.

Contact us