Applied Data · Module 9

Risk, ethics and strategic value

Data risk is broader than security.

20 min 4 outcomes Data Intermediate

Previously

Data as a product (making datasets usable, not just available)

A mature organisation treats important datasets like products.

This module

Risk, ethics and strategic value

Data risk is broader than security.

Next

Data Intermediate practice test

Test recall and judgement against the governed stage question bank before you move on.

Progress

Mark this module complete when you can explain it without rereading every paragraph.

Why this matters

Use this to build practical judgement, not abstract compliance language.

What you will be able to do

  • 1 Explain risk, ethics and strategic value in your own words and apply it to a realistic scenario.
  • 2 Value without safeguards creates harm. Safeguards without value create waste.
  • 3 Check the assumption "Risk is revisited" and explain what changes if it is false.
  • 4 Check the assumption "Value is measurable" and explain what changes if it is false.

Before you begin

  • Foundations-level vocabulary and concepts
  • Confidence with basic diagrams and section terminology

Common ways people get this wrong

  • Set and forget. A system that never reviews risk and value becomes brittle.
  • Vanity metrics. Metrics that make a dashboard look busy can hide real failure.

Main idea at a glance

Diagram

Stage 1

Collect

Data originates from users, systems, or sensors.

I think collection should come with explicit consent about purpose.

Data risk is broader than security. Misuse, misinterpretation, and neglect can harm people and decisions. Ethics asks whether we should use data in a certain way, not just whether we can. Strategic value comes from using data to improve services, not just to collect more of it.

Risk points appear along the lifecycle. Collection without consent, processing without checks, sharing beyond purpose, keeping data forever. Controls and culture reduce these risks. A small habit, like logging changes or reviewing outliers, prevents large mistakes.

Treat data as a long term asset. Good stewardship, clear value cases, and honest communication build trust that lasts beyond a single project.

Verification and reflection. Show professional judgement

Risk and ethics judgement drill

Use this to build practical judgement, not abstract compliance language.

  1. Choose a least-bad option

    Pick one risky scenario and justify the decision explicitly.

  2. Name likely harm and stakeholder

    State who is most exposed and what concrete harm looks like.

  3. Add one realistic control

    Choose a safeguard a small team can actually run consistently.

Mental model

Risk and value together

Value without safeguards creates harm. Safeguards without value create waste.

  1. 1

    Value

  2. 2

    Risk

  3. 3

    Controls

  4. 4

    Evidence

Assumptions to keep in mind

  • Risk is revisited. Risk changes when systems change. Review risk on a cadence, not only after incidents.
  • Value is measurable. If you cannot measure value, you cannot defend investment choices.

Failure modes to notice

  • Set and forget. A system that never reviews risk and value becomes brittle.
  • Vanity metrics. Metrics that make a dashboard look busy can hide real failure.

Check yourself

Quick check. Risk, ethics, and strategic value

0 of 6 opened

What is data risk beyond security

Misuse, misinterpretation, or harm from poor handling.

Scenario. A vendor offers a discount if you share richer customer data. What question should you ask first

Does this fit the original purpose and consent. If not, the right answer is usually no, or a redesigned consent and minimisation approach.

Why do ethics matter

To ensure data use respects people and purpose.

Where do risks appear

All along the lifecycle. Collect, process, share, and retain.

What builds long term value

Clear purpose, stewardship, and honest communication.

Why log changes and outliers

Small habits catch issues before they spread.

Artefact and reflection

Artefact

A one-page decision note with assumption, evidence, and chosen action

Reflection

Where in your work would explain risk, ethics and strategic value in your own words and apply it to a realistic scenario. change a decision, and what evidence would make you trust that change?

Optional practice

Review short scenarios and identify the risks and consequences.

Source DAMA DMBOK 2 (Data Management Body of Knowledge, 2nd Edition)
Source ISO/IEC 11179 metadata registries
Source ISO/IEC 27701:2025 privacy information management
Source ICO data protection principles and UK GDPR guidance