EDM Council DCAM - Data Management Capability Assessment Model
Component 7: Data Management Operations, Risk and Control – EDM Council DCAM - Data Management Capability Assessment Model

EDM Council DCAM - Data Management Capability Assessment Model 7.2: 7.2 Data Management Risk

Data risk management identifies, assesses and mitigates data-related risk, with risks tracked, prioritized and integrated into the organization's enterprise risk framework (three lines of defence, risk, audit). Carries forward v2.2 capability 7.3 (data risk managed), with an updated view of data risk in v3.

Maintained by Gerard BlokdykControl text last updated

What else in your programme already covers this

This control maps to 2 controls across 2 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

Australian Government Data Governance Framework (2025) · 1 control

  • 4.1 4.1 Strategy and planning, including a data risk approach

BCBS 239 · 1 control

  • P1 Principle 1: governance of risk data aggregation and risk reporting

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Component 7: Data Management Operations, Risk and Control – EDM Council DCAM - Data Management Capability Assessment Model

Query this from an agent

The graph holds this control, the 2 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll EDM Council DCAM - Data Management Capability Assessment Model controls