In 2024, we enhanced our approach to data governance, privacy and enterprise risk management, strengthening our ability to protect data integrity and mitigate potential challenges.
Data GovernanceBuilding on the foundation laid in 2023, we matured our data governance function through enhanced structure, accountability and alignment with business needs.
- Our Data Governance Council, composed of cross-functional leaders, met bi-weekly to review and approve strategic changes to our data ecosystem.
- We formalized our Council Charter, defining the group's purpose, scope, responsibilities and decision-making authority.
- Council subcommittees expanded their focus on business glossary definitions, data ownership and identification of critical data elements.
Privacy EnhancementsWe continued to embed privacy into our business practices by expanding training, strengthening contracting processes and aligning with our technology roadmap.
- We delivered tailored privacy trainings to business teams that handle personal data.
- We improved our technology contracting to ensure privacy compliance.
- We embedded privacy-by-design principles into all technology roadmap projects.
Enterprise Risk ManagementWe advanced our enterprise risk management strategy by formalizing governance, clarifying risk categories and gathering firmwide insights.
- We formalized our Executive Risk Committee with structured quarterly meetings to discuss enterprise risks and mitigation strategies.
- We implemented risk taxonomy to standardize risk identification and mitigation.
- We conducted an Enterprise Risk Assessment Survey to refine risk strategies.
These efforts reinforce our commitment to protecting data, managing risk and upholding trust across our business.