Public Sector · Illustrative engagement
Rationalising data policy across a public body
Twenty-seven overlapping data policies were consolidated into a clear hierarchy mapped to national data protection law, with a costed three-year roadmap.
- Client
- A national public sector agency
- Region
- Africa
- Disciplines
- Policy Management, Consulting Services
The situation
The agency had accumulated data, records, security and privacy policies over a decade, written by different directorates and frequently in conflict.
A new national data protection regime raised the stakes on classification, retention and accountability for personal data.
Our approach
- Completed a rapid maturity assessment against DAMA-DMBOK to establish a baseline and prioritise effort.
- Built an obligations register mapping data protection, records management and cyber requirements to policy statements and controls.
- Redrafted the policy estate as one policy, nine standards and supporting procedures, in plain language.
- Delivered the programme under PRINCE2, with a costed roadmap approved by the executive board.
Results
reduction in policy documents with no loss of regulatory coverage
of in-scope obligations traced to a policy statement and control
costed roadmap approved and funded
More case studies
- Evidencing BCBS 239 through end-to-end lineage
- A Solvency II data quality framework the board reads
- From shelfware to a catalogue analysts rely on
Case studies describe representative engagements. Client names, figures and identifying details are anonymised.
Start with a conversation, not a proposal
Tell us where your data is letting you down. We will come back within two working days with a clear view of what it takes to fix it.