Type
Information Technology Policies
Category
Information Security Policies


  1. Purpose and scope
    1. This policy establishes common roles and responsibilities for the stewardship of the University of Missouri’s institutional data. Institutional data are valuable University assets. Clear stewardship roles support the protection and responsible use of these data. This policy applies to the University of Missouri System and its four campuses.
  2. Policy
    1. The University of Missouri shall establish and document data stewardship roles to ensure that institutional data is appropriately managed, protected, shared, and used. 
    2. The University of Missouri shall promote a culture of data stewardship that recognizes the value of institutional data and supports individuals in understanding and fulfilling their responsibilities for its management, protection, and use.
  3. Stewardship roles and responsibilities
    1. Data Trustees have the highest authority and responsibility for information within a data domain. They are accountable to the University for the data within their domain and are responsible for ensuring that the data is managed in accordance with regulatory, security, privacy, and internal policies.  
    2. Lead Data Stewards are university leaders who oversee a data domain and have delegated decision-making and policy-setting authority from Data Trustees. Their responsibilities include:
      1. establishing the data lifecycle, access policies, and required education and training so data are appropriately managed, protected, and used
      2. providing leadership in data governance, including regular participation in stewardship meetings and facilitating collaboration across data domains
    3. Data Stewards support Lead Data Stewards in the day-to-day stewardship of institutional data, including its protection, management and improvement in accordance with relevant policies, business rules, and regulations. They may serve as subject matter experts for their assigned area within a data domain.
    4. Data Custodians manage the technical environment for data. They implement and enforce access policies, data quality rules, and other guidelines provided by Lead Data Stewards or their delegates to ensure the security, confidentiality, and integrity of data. 
    5. Data Consumers are users with authorized access to institutional data who are responsible for using it in accordance with approved purposes and completing required education or training. 
  4. Definitions
    1. Institutional data is data created, collected, maintained, or used by the University to support its academic, administrative, and operational activities. These data are governed by university policies regardless of where it is stored or managed. 
    2. Data domains are used to establish boundaries, define interdependencies, and assign accountability for institutional data. They group data to support consistent access controls, usage policies, and data standards. Data domains are conceptually independent of the university’s technological structure.