| File Reference : | P-102 Data Ownership Policy |
| Date File Updated | 29-09-26 |
| File Format | MS Word |
| No. of files | 1 |
| Category | Policies | Tags: data ownership policy, information assets register, data owners, Cyber Essentials |
Included in the alphaZ subscription
Every alphaZ document and toolkit, with updates as they are released. Everything you download is yours to keep.
A data ownership policy template that treats data as a business asset, with registers of the data held and a named owner for every data asset.
This policy template is supplied in fully editable MS Word format and can be easily customised and edited. The document uses pre-defined style formatting throughout, with all text in Calibri font for improved readability.
The following document labelling is included in the footer:
- Policy number and title
- Information-classification
- Version
- Page number / total pages
Further guidance on information assets:
Download this policy template with your company name and logo already added!
Document Preparation is included with the alphaZ subscription.
This file is included in the alphaZ subscription.
If you'd like this policy prepared for your organisation along with the rest of your company policies, or help with your information security risk assessment and treatment plan, our remote support services provide direct expert input from our team, by the day, by project, or on an ongoing basis.
Data Ownership Policy Template
A data ownership policy template recognising data as a critical business asset and making the protection of its confidentiality, integrity and availability from all threats a business priority, through clear ownership and responsibility.
The policy has Approved By and Date Approved fields and carries a Public information classification, so it can be shared with workers, clients and other interested parties.
What the Data Ownership Policy Covers
- Scope - all data collected, held or controlled by the organisation
- Data as an asset - protected from internal, external, deliberate and accidental threats
- Identifying data - up-to-date registers of the data held and processed, including information assets, personal data and data backups
- Physical and electronic - physical data assets considered as well as electronic systems
- Named owners - every data asset on the registers with a named owner
- Owners' responsibilities - correct classification and protection, controlled access and up-to-date register entries
Checked Against Cyber Essentials
The IT policies in the range have been checked against the Cyber Essentials requirements, so their rules on passwords, devices, access and updates do not contradict what a Cyber Essentials assessment asks for.
Written to Be Shared
Like every alphaZ policy, this is written as a public policy statement that can be shared openly with workers, customers, suppliers and assessors. The internal detail of how it is carried out belongs in your procedures.
Using the Policy
Add your company name and logo, check each commitment matches what your organisation does and edit any that do not, then approve and date the policy and share it with workers and anyone else who needs to see it.
Who Needs a Data Ownership Policy?
Organisations working to ISO 27001 or preparing for Cyber Essentials, and any organisation that wants clear ownership of the data it holds.
Works with the Asset Registers
Information assets can be recorded on the F-IMS25 Information Assets Register and personal data on the F-IMS24 Personal Data Register, and the PP-8-01 Data Backup Policy Procedure covers backups.
Document Control
The footer carries the policy number and title, information classification, version and page numbers, and the approval fields record who approved the policy and when, so it can be controlled with the rest of your management system documents and listed on a document register such as the F-IMS20 Document Register.
Related Policies
- P-31 Information Protection Policy - information protection
- P-90 Records Management Policy - records management
- P-101 Shared Data Responsibility Model Policy - shared data responsibility
Would you rather we prepared it for you?
Our Company Forms, Policies and HR Reset service prepares your policy set, staff handbook and HR forms as one branded set, tailored to how you actually run things.
