EDM Council DCAM - Data Management Capability Assessment Model

International (EDM Council)

v2.2.1

9 domains

27 controls

The EDM Council Data Management Capability Assessment Model (DCAM), an industry capability/maturity model for enterprise data management. Organised into 8 components (Data Management Strategy; Business Case and Funding Model; Data Management Program; Data Governance; Data Architecture; Technology Architecture; Data Quality Management; Data Operations and Control Environment), each with capabilities and sub-capabilities, assessed against a maturity scale. Used to baseline and improve an organisation's data management capability. The full model is provided to EDM Council members under licence.

Unverified

Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (9)

DCAM Component 1: Data Management Strategy

3 controls

Controls in the DCAM Component 1: Data Management Strategy domain of EDM Council DCAM - Data Management Capability Assessment Model — 3 controls
Code	Title	Description
DCAM-1.1	Data Management Strategy	A data management strategy is defined, documented and approved by senior leadership, aligned to business strategy and ob...
DCAM-1.2	Data Management Roadmap	A roadmap translating the data management strategy into prioritised initiatives and milestones is established and mainta...
DCAM-1.3	Stakeholder Alignment	Stakeholders across business and technology are engaged and aligned to the data management strategy and their roles with...

DCAM Component 2: Business Case and Funding Model

3 controls

Controls in the DCAM Component 2: Business Case and Funding Model domain of EDM Council DCAM - Data Management Capability Assessment Model — 3 controls
Code	Title	Description
DCAM-2.1	Business Case	A business case for the data management program is developed, articulating value, costs and benefits.
DCAM-2.2	Funding Model and Sustainment	A funding model is established and sustained to resource the data management program over time.
DCAM-2.3	Education, Communication and Change Management	Education, communication and change-management activities are conducted to embed data management across the organisation...

DCAM Component 3: Data Management Program

3 controls

Controls in the DCAM Component 3: Data Management Program domain of EDM Council DCAM - Data Management Capability Assessment Model — 3 controls
Code	Title	Description
DCAM-3.1	Data Management Program Operating Model	A data management program with a defined operating model, structure, roles and responsibilities is established.
DCAM-3.2	Program Routines and Processes	Routines and processes for running the data management program (planning, prioritisation, reporting) are defined and ope...
DCAM-3.3	Program Performance Management	The performance of the data management program is measured and managed against defined objectives and metrics.

DCAM Component 4: Data Governance

4 controls

Controls in the DCAM Component 4: Data Governance domain of EDM Council DCAM - Data Management Capability Assessment Model — 4 controls
Code	Title	Description
DCAM-4.1	Data Governance Operating Model	A data governance operating model with governance bodies, decision rights and escalation paths is established and operat...
DCAM-4.2	Data Policies and Standards	Data policies and standards are defined, approved, published and enforced across the organisation.
DCAM-4.3	Data Ownership and Stewardship	Data ownership and stewardship roles are assigned and active for data domains and critical data.
DCAM-4.4	Critical Data Element Identification	Critical data elements are identified, documented and prioritised for governance and quality management.

DCAM Component 5: Data Architecture

3 controls

Controls in the DCAM Component 5: Data Architecture domain of EDM Council DCAM - Data Management Capability Assessment Model — 3 controls
Code	Title	Description
DCAM-5.1	Data Architecture and Models	A data architecture (conceptual, logical and physical data models) is defined, maintained and aligned to business needs.
DCAM-5.2	Data Lineage and Flows	Data lineage and data flows are documented and maintained across the data supply chain.
DCAM-5.3	Reference and Master Data	Reference and master data are defined, governed and managed to ensure consistency across the organisation.

DCAM Component 6: Technology Architecture

3 controls

Controls in the DCAM Component 6: Technology Architecture domain of EDM Council DCAM - Data Management Capability Assessment Model — 3 controls
Code	Title	Description
DCAM-6.1	Technology Architecture for Data	A technology architecture supporting the data architecture (platforms, integration, storage) is defined and governed.
DCAM-6.2	Data Platforms and Tooling	Data platforms and tooling are provisioned, managed and aligned to the data management capabilities they support.
DCAM-6.3	Metadata Management	Metadata is captured, managed and made available (business, technical and operational metadata) to support data manageme...

DCAM Component 7: Data Quality Management

3 controls

Controls in the DCAM Component 7: Data Quality Management domain of EDM Council DCAM - Data Management Capability Assessment Model — 3 controls
Code	Title	Description
DCAM-7.1	Data Quality Strategy	A data quality strategy and framework defining dimensions, roles and processes is established.
DCAM-7.2	Data Quality Measurement and Profiling	Data quality is measured and profiled against defined dimensions and rules, with results monitored and reported.
DCAM-7.3	Data Quality Remediation	Data quality issues are triaged, prioritised and remediated through a defined remediation process.

DCAM Component 8: Data Operations and Control Environment

4 controls

Controls in the DCAM Component 8: Data Operations and Control Environment domain of EDM Council DCAM - Data Management Capability Assessment Model — 4 controls
Code	Title	Description
DCAM-8.1	Data Operations	Data operations (ingestion, processing, provisioning, monitoring) are managed through defined operational processes.
DCAM-8.2	Data Control Environment and Risk	A data control environment is established with controls and risk management over data processes and outcomes.
DCAM-8.3	Information Security and Privacy	Information security and privacy requirements are integrated into data management (protection, access, privacy of data).
DCAM-8.4	Data Lifecycle Management	Data is managed across its lifecycle (creation, use, retention, archiving and disposal) under defined policy.

DCAM: Capability Maturity Assessment

1 controls

Controls in the DCAM: Capability Maturity Assessment domain of EDM Council DCAM - Data Management Capability Assessment Model — 1 controls
Code	Title	Description
DCAM-MAT	Capability Maturity Assessment	Data management capabilities are assessed against the DCAM maturity scale (e.g. not initiated through enhanced), with sc...

Maps to 2 other frameworks

27 total controls

EDM Council CDMC - Cloud Data Management Capability Framework

4 source controls mapped|4 target controls covered

15%

NIST Cybersecurity Framework 2.0

3 source controls mapped|3 target controls covered

11%

Compare EDM Council DCAM - Data Management Capability Assessment Model with EDM Council CDMC - Cloud Data Management Capability Framework

Frequently Asked Questions

What is EDM Council DCAM - Data Management Capability Assessment Model?

EDM Council DCAM - Data Management Capability Assessment Model is a compliance framework from International (EDM Council) with 9 domains and 27 controls. The EDM Council Data Management Capability Assessment Model (DCAM), an industry capability/maturity model for enterprise data management. Organised into 8 components (Data Management Strategy; Business Case and Funding Model; Data Management Program; Data Governance; Data Architecture; Technology Architecture; Data Quality Management; Data Operations and Control Environment), each with capabilities and sub-capabilities, assessed against a maturity scale. Used to baseline and improve an organisation's data management capability. The full model is provided to EDM Council members under licence. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

How many controls does EDM Council DCAM - Data Management Capability Assessment Model have?

EDM Council DCAM - Data Management Capability Assessment Model has 27 controls organised across 9 domains. The largest domains are DCAM Component 4: Data Governance (4 controls), DCAM Component 8: Data Operations and Control Environment (4 controls), DCAM Component 1: Data Management Strategy (3 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

What frameworks does EDM Council DCAM - Data Management Capability Assessment Model map to?

EDM Council DCAM - Data Management Capability Assessment Model maps to 2 other compliance frameworks. The top mapping partners are EDM Council CDMC - Cloud Data Management Capability Framework (15% coverage), NIST Cybersecurity Framework 2.0 (11% coverage). Use our comparison tool to explore control-level mappings between frameworks.

How do I get started with EDM Council DCAM - Data Management Capability Assessment Model compliance?

Start your EDM Council DCAM - Data Management Capability Assessment Model compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about EDM Council DCAM - Data Management Capability Assessment Model requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 27 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 700 frameworks.

Get Started Free →

Free forever — no credit card required