Carnegie Mellon Tackles Data Management Maturity Model for Finance

The institution known for trying to make the world's organizational processes more effective through its introduction of the Capability Maturity Model Integration (CMMI) is at it again--this time specifically to improve the processes behind financial management. The Carnegie Mellon Software Engineering Institute (SEI) and the Enterprise Data Management (EDM) Council are teaming up to create a new data management maturity model for the financial industry. The new model will be designed to define the components of data management at the specific business-process level so that financial organizations can assess themselves against documented best practices.

The SEI and EDM Council will collaborate on development of this new model to help the financial industry become more proficient in its management of data and to provide a consistent and comparable benchmark for regulatory authorities in their efforts to control operational risk. Using the process areas found in CMMI and the CERT Resiliency Management Model, the entities will collaborate to develop the framework and accompanying assessment methodology that can be adopted by financial organizations worldwide.

"While many executive managers conceptually understand the importance of data management, there are very little practical experiences and no proven operational route map to guide them on their journey," said Mike Phillips, manager of CMMI initiatives at the SEI. "With our experience in developing capability models and EDM Council's extensive knowledge of data management, we are confident that the new model will serve as the much needed roadmap for financial institutions."

"The Data Management Maturity Model initiative will provide a measurable benchmark for evaluating the efficiency of data management practices, the maturity of operational integration, and the establishment of essential standards and data definitions," said John Muholland, global head of reference data for RBC Financial Group and a director of the EDM Council. "The DMM will not only help guide and measure a firm's providence over their own data quality processes and governance structures, it will provide consistent criteria to measure the services of external providers."

Michael Atkin, managing director of the EDM Council, agreed that efficient business operations and effective oversight are compromised when data management processes are managed on a manual and reactive basis. "All too often, data exists in unconnected spreadsheets using multiple formats and inconsistent definitions--and integration is frequently done tactically in response to immediate business requirements," said Atkin. "As a result, data quality varies widely among business units, data failures occur with regularity, and cross-functional views of risk are difficult to obtain."

To assist in their research, development and piloting efforts, the SEI and EDM Council are seeking input from financial organizations so that the research can be applied to real-world situations.

About the Author

Dian Schaffhauser is a former senior contributing editor for 1105 Media's education publications THE Journal, Campus Technology and Spaces4Learning.

Featured

  • glowing crystal ball with network connections

    Call for Opinions: 2026 Predictions for Higher Ed IT

    How will the technology landscape in higher education change in the coming year? We're inviting our readership to weigh in with their predictions, wishes, or worries for 2026.

  • digital book with circuit patterns

    Turnitin and ACUE Partner on AI Training for Educators

    Turnitin is teaming up with the Association of College and University Educators to create a series of courses on AI and academic integrity designed to help faculty navigate the responsible use of AI in learning and assessment.

  • Hand holding a stylus over a tablet with futuristic risk management icons

    Why Universities Are Ransomware's Easy Target: Lessons from the 23% Surge

    Academic environments face heightened risk because their collaboration-driven environments are inherently open, making them more susceptible to attack, while the high-value research data they hold makes them an especially attractive target. The question is not if this data will be targeted, but whether universities can defend it swiftly enough against increasingly AI-powered threats.

  • Red alert symbols and email icons floating in a dark digital space

    Google Cloud Report: Cyber Attackers Are Fully Embracing AI

    According to Google Cloud's 2026 Cybersecurity Forecast, AI will become standard for both attackers and defenders, with threats expanding to virtualization systems, blockchain networks, and nation-state operations.