liveBook · Manning

Data governance

As explained in Effective Platform Engineering

Governance is the set of policies, controls, and decision processes that direct and constrain organizational technology practices.

Data governance directs and constrains technology practices through policies, controls, and decisions about data access, security, compliance, and trust. It is not a separate approval layer that platform engineering can ignore: security, audit, Infosec, Legal, and Governance retain distinct requirements that must shape how software is delivered. section 4.0

Effective governance turns stakeholder requirements into platform behavior:

  • Require controls on sensitive dataset APIs so that only authorized users can access them. section 4.0
  • Preserve nonterminable evidence for every deployment when audit requirements demand SOX compliance. section 4.0
  • Establish baseline security services for every cluster, then mature those guardrails into automated governance. section 8.2.1
  • Keep secrets management available within deployment definitions when a deployer such as Argo or Flux performs delivery outside the release pipeline. section 8.2.1

The practical goal is invisible, always-on governance: controls integrated into the platform experience rather than added as an afterthought or a recurring barrier. This approach reduces developer friction while giving security and compliance teams consistent assurance, and it can be applied incrementally across new or existing platform environments. section 8.2.1 section 4.0

How Effective Platform Engineering covers it

How deep it goes
Connects governance requirements to platform guardrails and automation, but stops short of specifying a complete governance operating model.
Examples
Uses sensitive dataset authorization, deployment evidence for SOX, cluster security baselines, and deployment-integrated secrets management.
What it assumes
Assumes familiarity with software delivery and platform engineering while treating stakeholder governance requirements as organizational constraints.
What you can do after
Operate/configure platforms with baseline controls that automate security, compliance, governance, and authorized data access.
How it connects
Connects data governance with platform engineering, compliance, audit, security, secrets management, identity, and trust.

Also explained in

Compare how 10 books explain data governance →

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Effective Platform Engineering. The section links point to the parts of the book it draws on.