Set organisational structures so data decisions are made by the right people at the right level and are captured and tracked for insight, accountability and recordkeeping, using executive groups, defined roles and supporting activities such as communities of practice, and considering representation in whole-of-government data governance groups; make someone responsible and known for authority over particular data sets and over the agency's overall data, working with information security, records management, legal, privacy and ICT. At a minimum appoint four key data roles: a Chief Data Officer (an SES officer with overall accountability for data, a role that cannot be delegated), and an Indigenous data champion, a data champion and a responsible officer for specific data assets (roles that may be delegated or held by the CDO); names and placement are flexible.
This control maps to 2 controls across 2 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 2 it maps to, and the evidence behind each claim, over MCP and REST.