
Data Governance Framework Builder
Build enterprise data governance frameworks with compliance-ready templates
What You Can Do
You design and implement comprehensive data governance frameworks aligned with GDPR, HIPAA, SOC 2, and ISO 27001. This skill generates structured policies, maturity assessments, and data classification taxonomies that map directly to your organization's risk profile and regulatory requirements. Each framework includes decision trees for stakeholder alignment, compliance checklists, and phased rollout roadmaps you can execute immediately.
Features
understand where you stand before designing changes
policies pre-mapped to your regulatory obligations
create risk-based taxonomies (Public, Internal, Confidential, Restricted) tailored to your data types
streamline data access requests, incident response, and approval workflows
communicate governance vision and build buy-in across business, compliance, and IT
clarify who owns, stewards, controls, and processes each data category
prepare for audits and demonstrate policy adherence
break governance into 12-month phases with quick wins and resource estimates
Example Output
Data Classification Taxonomy
- Public: Marketing materials, public documentation
- Internal: HR policies, internal communications, strategic plans
- Confidential: Customer PII, financial records, source code
- Restricted: Passwords, encryption keys, health data (PHI under HIPAA)
Maturity Assessment Result
- Current State: Level 2 (Repeatable) — Basic policies exist, inconsistent enforcement
- Target State: Level 3 (Managed) — Documented processes, automated workflows, regular audits
- Timeline: 12 months
- Top 3 Gaps: Missing stewardship roles, no audit trails for access requests, policies not enforced
GDPR Data Subject Rights Policy
- Policy: Data Subject Access Request (DSAR) Process
- Scope: All customer and employee personal data
- Responsibility: DPO reviews, Legal approves, IT executes
- Timeline: 30-day response requirement
- Evidence: Request log, compliance report, response delivery proof
What's Included
- SKILL.md file with governance framework decision trees and workflows:
- Governance maturity assessment templates (CMMI-aligned):
- Compliance policy templates for GDPR, HIPAA, SOC 2, ISO 27001:
- Data classification taxonomy builder with risk matrices:
- Stakeholder alignment decision trees and communication plans:
- Data stewardship RACI matrices and role definition templates:
- Compliance audit checklists and evidence tracking workbooks:
- 12-month implementation roadmap generator with phasing strategy and resource estimation:
Who It's For
- Chief Data Officers and data governance leads designing enterprise frameworks from scratch
- Compliance and risk managers implementing policies for regulated industries (finance, healthcare, SaaS)
- Privacy officers building GDPR, HIPAA, or industry-specific compliance controls
- IT operations teams establishing data stewardship, access governance, and audit trails
- Audit and internal control leaders documenting maturity gaps and compliance evidence
Best For
- Creating data governance maturity models and baseline assessments against best practices
- Developing compliant policies for regulated data categories (PII, PHI, financial records, trade secrets)
- Designing data classification taxonomies and risk-based access controls
- Building governance workflows for data requests, incident response, and stakeholder approvals
- Planning phased rollout strategies across teams with quick wins and clear ROI







