Legend: Stakeholder present Stakeholder excluded Layer skipped Certification gate Click any layer card for details
Ideal: Governed Process
Scenario 1: Models Without Business
Scenario 2: Pipelines Without Governance
Governed Data Modeling
All stakeholders collaborate at every layer. Business meaning flows from concept to pipeline with full metadata, ontology, and quality governance.
Conceptual Data Model
Business entities, relationships, and domain boundaries defined collaboratively with ontology and taxonomy alignment
Business Owner Data Owner Data Architect CDO Compliance
Ontology: Product IS-A SKU; Customer HAS-A Address; Store PART-OF Region. Taxonomy: Sales, Supply Chain, Finance, Customer domains classified.
Completeness Accuracy Consistency Timeliness Validity Uniqueness
Governance Artifacts
  • Business glossary defined & approved
  • Domain ontology documented (entity relationships, hierarchies)
  • Taxonomy classification for all domains
  • Data ownership RACI matrix signed off
  • Regulatory scope identified (GDPR, SOX applicability)
  • Subject area model approved by CDO
Metadata Requirements
  • Entity definitions in business glossary
  • Relationship cardinality documented
  • Domain boundaries and context mapping
  • Data classification tags (PII, confidential, public)
  • Stewardship assignments per entity
Naming Convention
Customer, Product, SalesOrder, StoreLocation, SupplierContract
Business Sign-Off Gate
Logical Data Model
Attributes, business rules, normalization, and constraints defined with domain expertise and validated attribute definitions
Data Owner Data Architect Data Modeler Data Steward
Completeness Accuracy Consistency Timeliness Validity Uniqueness
Governance Artifacts
  • Attribute definitions with business descriptions
  • Business rules documented per entity
  • Normalization to 3NF with documented exceptions
  • Reference data / code lists managed centrally
  • Cross-domain mapping to glossary terms
  • Data quality rules defined per attribute
Metadata Requirements
  • Attribute-level business definitions
  • Data types, lengths, and constraints
  • Valid value ranges and enumerations
  • Nullability and default values
  • Foreign key relationships documented
Naming Convention
customer_id, product_name, order_date, store_region_code, unit_price_amount
Domain Review Gate
Physical Data Model
Database schemas, indexes, partitions, and performance optimization with full lineage to logical model
Data Architect Data Engineer Data Modeler Data Steward
Completeness Accuracy Consistency Timeliness Validity Uniqueness
Governance Artifacts
  • Physical-to-logical model mapping
  • Column-level lineage to business glossary
  • Data masking rules for PII columns
  • Retention policies per table
  • Performance / partitioning rationale
  • Schema change management process
Naming Convention
dim_customer, fact_sales_order, ref_product_category, stg_erp_material
Architecture Review Gate
Data Pipelines / ETL
Extract, transform, load with lineage, quality gates, monitoring, and formal data contracts
Data Engineer Data Architect Data Steward BI Consumer
Data Contract: Schema version, SLA (freshness ≤ 15 min), quality thresholds (null rate < 0.1%), owner, consumers, and breaking-change policy defined.
Completeness Accuracy Consistency Timeliness Validity Uniqueness
Governance Artifacts
  • Data contracts per pipeline output
  • SLA definitions (freshness, availability)
  • Quality gate checks (completeness, referential integrity)
  • End-to-end lineage (source → transform → target)
  • Alerting and monitoring dashboards
  • Schema evolution / versioning policy
Naming Convention
pipe_erp_to_dim_customer_v2, job_daily_sales_aggregate, dq_check_order_completeness
Governance Score
95%
DAMA DMBOK: Level 5 (Optimized)  |  DCAM: Managed & Measurable
Outcomes
  • Data models reflect actual business semantics and domain rules
  • Business glossary aligned with physical implementation end-to-end
  • Data quality rules enforced from concept through pipeline via certification gates
  • Full traceability: business concept → logical entity → physical table → pipeline
  • Compliance, lineage, and audit trail maintained end-to-end (GDPR, SOX ready)
  • Data contracts ensure consumers know schema, SLAs, and quality guarantees
  • Ontology and taxonomy provide shared vocabulary across all teams
CDM & LDM Without Business / Data Owners
Data Architects and Modelers build the conceptual and logical models in isolation. Business glossary terms assumed rather than validated. Data Engineering then implements.
Conceptual Data Model
Entities and relationships based on technical assumptions; no business validation of ontology or domain boundaries
Business Owner Data Owner Data Architect CDO Compliance
Ontology: Technical relationships only; "Customer" defined as account record, not business relationship. Taxonomy guessed from source system structure.
Completeness Accuracy Consistency Timeliness Validity Uniqueness
Governance Artifacts
  • Business glossary: not reviewed by business
  • Ontology: technical relationships only, missing business hierarchies
  • Taxonomy: copied from source system, not validated
  • RACI matrix: no business or data owner sign-off
  • Regulatory scope: not assessed
  • Subject area model: exists but unapproved
Metadata Requirements
  • Entity definitions: technical, not business-validated
  • Relationship cardinality documented
  • Domain boundaries: assumed from system architecture
  • Data classification: PII not identified
  • Stewardship: no assignments
Naming Convention
Cust, Prod, SalesOrd, StrLoc (abbreviated, no standard)
Logical Data Model
Attributes defined without domain expertise; business rules guessed, attribute definitions incomplete
Data Owner Data Architect Data Modeler Data Steward
Completeness Accuracy Consistency Timeliness Validity Uniqueness
Governance Artifacts
  • Attribute definitions: technical only, no business meaning
  • Business rules: guessed from data patterns
  • Normalization applied
  • Reference data: hard-coded, not centrally managed
  • Glossary mapping: not done
  • Data quality rules: not defined
Naming Convention
cust_id, prod_nm, ord_dt, str_rgn, prc_amt (inconsistent abbreviation)
Physical Data Model
Schema built on flawed logical model; structural misalignment propagates downstream
Data Architect Data Engineer Data Steward
Completeness Accuracy Consistency Timeliness Validity Uniqueness
Governance Artifacts
  • Physical-to-logical mapping: exists but based on flawed LDM
  • Column lineage to glossary: no glossary to link to
  • PII masking rules: PII not identified at CDM stage
  • Retention policies: generic, not business-validated
  • Partitioning rationale documented
  • Change management: informal
Data Pipelines / ETL
Pipelines implement an incorrect model; transforms encode wrong business logic, informal data contracts
Data Engineer BI Consumer
Data Contract: Schema documented informally in wiki. No SLA, no quality thresholds, no versioning. Consumers discover breaking changes after deployment.
Completeness Accuracy Consistency Timeliness Validity Uniqueness
Governance Artifacts
  • Data contracts: informal, schema only
  • SLA definitions: none
  • Quality gates: no automated checks
  • Lineage: partial, tool-generated
  • Monitoring: basic job status only
  • Schema versioning: not implemented
Governance Score
40%
DAMA DMBOK: Level 2 (Repeatable)  |  DCAM: Initial / Developing
Consequences
  • Entity definitions don't match how the business actually thinks about data
  • Missing or incorrect business rules (e.g., wrong customer hierarchy, invalid product grouping)
  • Business glossary and technical model diverge, creating a "same name, different meaning" problem
  • Data quality issues surface late, discovered only when reports don't match reality
  • Expensive rework when business finally reviews, causing cascading changes through all 4 layers
  • Data Owners cannot certify data they didn't help define (governance gap)
  • Regulatory risk: lineage exists but doesn't reflect actual business intent (SOX finding)
  • Shadow datasets emerge as business teams build their own "correct" views
Pipelines Built Without Any Governance
Data Engineering builds pipelines and the physical layer directly: no formal data model, no business glossary, no ontology, no metadata, no data contracts.
Conceptual Data Model
Skipped: no shared understanding of business entities, no ontology, no taxonomy
Business Owner Data Owner Data Architect CDO Compliance
No ontology. No taxonomy. No domain boundaries. Business concepts undefined.
Completeness Accuracy Consistency Timeliness Validity Uniqueness
Governance Artifacts
  • Business glossary: does not exist
  • Ontology: does not exist
  • Taxonomy: does not exist
  • RACI matrix: does not exist
  • Regulatory scope: never assessed
  • Subject area model: does not exist
Logical Data Model
Skipped: no attributes, no normalization, no business rules documented
Data Owner Data Architect Data Modeler Data Steward
Completeness Accuracy Consistency Timeliness Validity Uniqueness
Governance Artifacts
  • Attribute definitions: does not exist
  • Business rules: does not exist
  • Normalization: not applied
  • Reference data: not managed
  • Quality rules: does not exist
Physical Data Model
Ad-hoc tables created per ticket: no design, no naming convention, no metadata, no documentation
Business Owner Data Owner Data Architect Data Engineer
Completeness Accuracy Consistency Timeliness Validity Uniqueness
Governance Artifacts
  • No logical model to map to
  • No lineage: tables created ad-hoc
  • No PII identification or masking
  • No retention policies
  • No change management
Naming Convention
tbl1_cust_v2, data_export_final_FINAL, johns_temp_table, raw_stuff_202401
Data Pipelines / ETL
Pipelines hard-coded to source schemas: no abstraction, no quality gates, no lineage, no data contracts
Business Owner Data Owner Data Architect Data Engineer BI Consumer
No data contracts. No SLAs. No schema versioning. Consumers have no guarantees.
Completeness Accuracy Consistency Timeliness Validity Uniqueness
Governance Artifacts
  • No data contracts
  • No SLAs
  • No quality gates
  • No lineage tracking
  • No monitoring (failures discovered by consumers)
  • No versioning (breaking changes unannounced)
Naming Convention
etl_script_v3_fixed, load_data_NEW, pipeline_test_PROD, johns_daily_job
Governance Score
10%
DAMA DMBOK: Level 0-1 (Ad-hoc)  |  DCAM: Non-existent / Initial
Consequences
  • No single source of truth; each pipeline defines its own "customer", "order", "product"
  • No data lineage: impossible to trace data origin or transformations applied
  • Contradictory reports: different pipelines produce different numbers for the same metric
  • Schema changes in sources break pipelines with no impact analysis possible
  • Business cannot trust or certify the data; decisions made on unreliable foundations
  • Regulatory non-compliance: no audit trail, no data catalog, no ownership (GDPR/SOX violation risk)
  • Massive technical debt: each new request means a new pipeline (no reuse possible)
  • Impossible to onboard new team members; all knowledge is tribal
  • Data quality issues discovered by end users in production, with no proactive monitoring
  • Complete rebuild required to implement governance retroactively (10x cost multiplier)

Business Glossary Trace: "Customer"

Glossary & Ontology

How the business term "Customer" flows (or fails to flow) from conceptual definition through to pipeline implementation in each scenario.

Ideal: Governed
CDM
Customer: "A person or organization that has purchased from or registered with any brand in the portfolio." Ontology: Customer IS-A Party; Customer HAS-A LoyaltyProfile, HAS-MANY Orders.
LDM
Entity: Customer with attributes: customer_id (PK, UUID), full_name (VARCHAR 200, NOT NULL), customer_type (ENUM: B2B|B2C|Wholesale), registration_date (DATE). Business rule: customer_type determines pricing tier.
PDM
Table: dim_customer, partitioned by region, indexed on customer_id + customer_type. PII columns (full_name, email) flagged for masking. Lineage: maps to LDM Customer entity and CDM glossary term.
Pipeline
Pipeline: pipe_erp_to_dim_customer. Source: SAP KNA1/BUT000. Transform: deduplicate on tax_id, standardize addresses, apply customer_type classification. Data contract: SLA 15-min freshness, null rate < 0.1%.
Scenario 1: No Business
CDM
Customer: "An account record in the ERP system." No distinction between B2B/B2C. Ontology reflects technical structure: Customer HAS-A AccountNumber.
LDM
Entity: Cust with attributes: cust_id (INT), nm (VARCHAR 50), tp (VARCHAR 10, no validation). Business rules guessed from data sampling. Missing: loyalty status, registration channel.
PDM
Table: tbl_customer, no partitioning strategy. PII not flagged. No lineage link to LDM. Column tp contains values "1", "2", "3" with no reference data table.
Pipeline
Pipeline: load_customers. Copies raw ERP data with minimal transformation. No dedup. Business discovers wholesale customers mixed with retail customers 3 months later.
Scenario 2: No Governance
CDM
Does not exist. No agreed definition of "Customer" anywhere in the organization.
LDM
Does not exist. No attributes defined. No business rules documented.
PDM
3 different tables: customers, cust_data_v2, customer_export_final. Each has different columns. No one knows which is authoritative. 40% record overlap.
Pipeline
5 separate pipelines each create their own customer tables. Sales says 1.2M customers; Marketing says 890K; Finance says 1.4M. Nobody can reconcile.

Attribute Definition: Well-Defined vs Undefined

Metadata & Attribute Definitions

Side-by-side comparison showing the difference between a properly governed attribute definition and one built without business input. Example: customer_type in a Retail context.

Well-Defined (Ideal Scenario)
PropertyValue
Business NameCustomer Type
Business DefinitionClassification of a customer based on their purchasing relationship: B2C (individual consumer), B2B (business buyer), or Wholesale (bulk distributor)
Logical Namecustomer_type
Data TypeENUM ('B2C', 'B2B', 'Wholesale')
NullableNo; every customer must be classified
Default Value'B2C' (most common segment)
Valid ValuesB2C, B2B, Wholesale (managed in ref_customer_type)
Business RuleDetermines pricing tier, discount eligibility, and payment terms
Data OwnerVP, Customer Operations
Glossary TermLinked to "Customer Classification" in business glossary
PII ClassificationNon-PII (classification, not personal data)
Quality RuleMust be one of 3 valid values; completeness ≥ 99.9%
Undefined (Scenario 2: No Governance)
PropertyValue
Business NameNot documented
Business DefinitionNot documented. Engineers assume "some kind of customer flag"
Logical Nametp (in one table), cust_type (another), type_cd (third)
Data TypeVARCHAR(50), no constraints
NullableYes; 12% of records are NULL
Default ValueNone
Valid ValuesContains: 1, 2, 3, "B2C", "b2c", "RETAIL", "wholesale", NULL, "", "unknown"
Business RuleNot documented. Each pipeline applies different logic
Data OwnerNobody. "IT owns the data"
Glossary TermNo business glossary exists
PII ClassificationNever assessed
Quality RuleNone. Issues found when CFO asks "why don't these numbers match?"

Retail Example: "Product" Entity Trace

End-to-End Lineage

Tracing a Product entity from business concept through all four layers in the ideal governed scenario, showing how ontology, metadata, and data contracts preserve meaning at each step.

CDM: Conceptual
Business Concept: Product: "A sellable item in the retail portfolio, identified by a unique SKU, belonging to a Category within a Department."
Ontology: Product IS-A MaterialItem; Product BELONGS-TO Category; Category BELONGS-TO Department; Product HAS-MANY Variants (size, color).
Taxonomy: Merchandising Domain → Product Management → Assortment Planning.
Glossary Terms: Product, SKU, Category, Department, Variant, UPC, Brand.
LDM: Logical
Entity: Product: product_id (PK, UUID), sku_code (VARCHAR 20, UNIQUE, NOT NULL), product_name (VARCHAR 200, NOT NULL), category_id (FK → Category), brand_code (FK → Brand), unit_of_measure (ENUM: EA|KG|LB|L), is_active (BOOLEAN), launch_date (DATE).
Business Rules: SKU must follow format [DEPT]-[CAT]-[SEQ]. Product must have at least one active variant. Price must be set before is_active = true.
Quality Rules: sku_code uniqueness 100%, product_name completeness ≥ 99.9%, category_id referential integrity 100%.
PDM: Physical
Table: dim_product (Snowflake, partitioned by category_id, clustered on sku_code).
Columns: product_sk (BIGINT, surrogate key), product_id (UUID, natural key), sku_code, product_name, category_sk (FK → dim_category), brand_sk (FK → dim_brand), uom_code, is_active_flag, launch_dt, effective_from_ts, effective_to_ts (SCD Type 2).
Lineage: Every column maps to LDM attribute and CDM glossary term. PII assessment: Non-PII.
Pipeline: ETL
Pipeline: pipe_sap_to_dim_product_v3
Source: SAP MARA (material master), MAKT (descriptions), MARM (units), T023 (material groups) via CDS view.
Transforms: Map MATNR → sku_code, MAKTX → product_name, MATKL → category_sk via ref_sap_category_map. Apply SCD2 logic. Deduplicate on MATNR.
Data Contract: Schema v3, SLA: refreshed every 30 min, quality: sku_code uniqueness 100%, null rate < 0.05%. Owner: Product Data Team. Consumers: Merchandising Analytics, Pricing Engine, E-Commerce Platform.
Quality Gates: Row count variance < 5% from source, referential integrity check on category_sk, completeness check on product_name.

Regulatory Compliance Impact

GDPR SOX BCBS 239
Requirement Regulation Ideal Scenario 1 Scenario 2
Data Lineage: trace data from source to report SOX, BCBS 239 Compliant Partial Non-compliant
Right to Erasure: locate and delete personal data GDPR Art. 17 Compliant Partial Non-compliant
Data Quality & Accuracy: ensure data is correct GDPR Art. 5, BCBS 239 Compliant Partial Non-compliant
Data Catalog / Inventory: know what data you have GDPR Art. 30 Compliant Partial Non-compliant
Access Controls: restrict data by role GDPR, SOX Compliant Partial Non-compliant
Audit Trail: log who accessed/changed data SOX, GDPR Compliant Partial Non-compliant
Data Ownership: clear accountability BCBS 239, SOX Compliant Non-compliant Non-compliant
Consent Management: track data processing basis GDPR Art. 6-7 Compliant Partial Non-compliant

Cost of Poor Data Quality

Business Impact Model

Estimated annual cost impact for a mid-size retailer ($500M revenue) based on industry benchmarks (Gartner, MIT CDOIQ). Costs include rework, lost revenue, compliance penalties, and opportunity cost.

Ideal: Governed
$250K
Annual governance investment
  • Data team overhead: $150K
  • Tooling (catalog, lineage): $80K
  • Training & change mgmt: $20K
  • Data quality issues: < $5K (caught early)
  • Regulatory fines: $0
Scenario 1: No Business
$1.8M
Annual cost of poor quality
  • Rework cycles: $400K
  • Shadow IT / duplicate efforts: $350K
  • Report reconciliation: $300K
  • Lost revenue (bad targeting): $500K
  • Compliance risk exposure: $250K
Scenario 2: No Governance
$5.2M
Annual cost of poor quality
  • Pipeline rebuild/maintenance: $1.2M
  • Bad business decisions: $1.5M
  • Regulatory fines (GDPR/SOX): $800K
  • Lost productivity (tribal knowledge): $900K
  • Remediation project: $800K

ROI of governance: Spending $250K to prevent $5.2M in losses = 20x return. Per Gartner: organizations estimate the average cost of poor data quality at $12.9M per year.

Data Governance Maturity Model

DAMA DMBOK DCAM

Mapping each scenario to DAMA DMBOK maturity levels and EDM Council's DCAM framework.

CapabilityIdeal (Level 4-5)Scenario 1 (Level 2)Scenario 2 (Level 0-1)
Data Architecture Enterprise data model with CDM/LDM/PDM alignment. Ontology-driven design. Models exist but disconnected from business meaning. No ontology validation. No formal architecture. Tables created ad-hoc per request.
Data Quality Proactive: rules at every layer, automated monitoring, SLAs enforced. Reactive: issues found in reports, some checks at pipeline level. None: quality issues discovered by end users in production.
Metadata Management Active metadata: business glossary, data catalog, automated lineage, classification. Passive metadata: some technical metadata in tools, no business context. No metadata: column names are the only documentation.
Data Governance Embedded: RACI, certification gates, change management, stewardship program. Defined: policies exist on paper but not enforced at model creation. Ad-hoc: no policies, no ownership, no accountability.
Data Stewardship Active stewards review changes, maintain glossary, enforce standards. Named but not engaged at modeling stage. Stewards react to issues. No stewards. "IT owns the data" is the default assumption.
Regulatory Compliance Built-in: PII tagging, retention policies, consent tracking, audit trail. Bolted-on: compliance addressed after models built, gaps in PII coverage. Non-existent: unknown PII exposure, no audit trail, fine risk.

Remediation Roadmap

Scenario 2 → Scenario 1 → Ideal

Step-by-step path from ungoverned pipelines to full governance maturity. Each phase builds on the previous one.

1

Phase 1: Triage & Inventory (Weeks 1-4)

Stop the bleeding. Catalog existing pipelines and tables. Identify data owners.

  • Inventory all pipelines, tables, and data flows (automated discovery tools)
  • Identify and tag PII columns across all physical tables (regulatory urgency)
  • Assign interim data owners per domain (Sales, Supply Chain, Finance, Customer)
  • Establish naming convention standard and publish to all engineering teams
  • Set up basic data quality monitoring on top 10 critical pipelines
2

Phase 2: Retroactive Modeling (Weeks 5-12)

Reverse-engineer logical and conceptual models from existing physical tables, validated with business stakeholders.

  • Build business glossary for top 20 critical terms with business owner sign-off
  • Create conceptual data model from existing tables, then validate with domain experts
  • Define ontology relationships (IS-A, HAS-A, BELONGS-TO) for core entities
  • Document attribute definitions for all critical tables (start with dim_ tables)
  • Establish data stewardship program with named stewards per domain
  • Implement data contracts for the 5 most-consumed pipeline outputs
3

Phase 3: Certification & Enforcement (Weeks 13-24)

Introduce certification gates. No new pipeline goes to production without an approved logical model.

  • Implement 3 certification gates: Business Sign-Off, Domain Review, Architecture Review
  • Mandate business glossary cross-reference for all new LDM attributes
  • Deploy automated data quality gates in CI/CD pipeline (block on failure)
  • Migrate reference data to centrally managed code lists
  • Complete GDPR / SOX compliance assessment with remediation plan
  • Launch data catalog with lineage visualization for all governed datasets
4

Phase 4: Optimization & Culture (Weeks 25-52)

Embed governance into culture. Measure and optimize. Achieve DAMA Level 4-5.

  • Automate lineage capture (end-to-end: source → transform → report)
  • Implement data quality SLAs with executive dashboards
  • Extend ontology and taxonomy to cover all domains (not just priority ones)
  • Retire legacy/duplicate tables and consolidate to single source of truth
  • Establish quarterly data governance reviews with CDO and domain owners
  • Measure governance ROI: compare data quality costs before and after program

The Core Problem

When Business Owners and Data Owners are excluded from data modeling, the resulting physical layer and pipelines encode technical assumptions instead of business reality. The ontology, business glossary, and attribute definitions (the foundation of shared meaning) are either wrong or missing entirely.

Cost of fix at CDM stage: 1x; at Pipeline stage: 50-100x

Why It Happens

"We'll validate with business later," but later never comes. Pressure to deliver pipelines fast leads teams to skip the conceptual and logical layers. Without certification gates, metadata requirements, and data contracts, there is no structural mechanism to enforce collaboration.

70% of data projects fail due to poor requirements, not poor technology

The Fix

Embed Business Owners at the CDM stage and Data Owners at the LDM stage as mandatory approvers. Implement certification gates between layers. Require data contracts before any pipeline goes live. Maintain an active business glossary and ontology that every model must reference.

Prevention is 20x cheaper than remediation