| Current-state assessment | Evidence review, maturity findings, gaps, risks, dependencies and priority recommendations. | Data leaders, governance, risk, technology | Policies, tools, inventories, interviews, issue logs |
| Metadata governance policy | Purpose, scope, principles, roles, mandatory controls, exceptions and review cycle. | Owners, stewards, assurance teams | Internal policy standards and obligations |
| Target operating model | Decision rights, RACI, forums, workflows, service interfaces and escalation. | Executives, domain leaders, platform teams | Organisation model and role constraints |
| Standards and playbooks | Glossary, taxonomy, lineage, classification, certification, quality and issue-management guidance. | Stewards, analysts, engineers, architects | Existing conventions and platform capabilities |
| Implementation roadmap | Priorities, work packages, dependencies, owners, decision gates, measures and adoption plan. | Programme sponsors and PMO | Funding, capacity, change windows and priorities |
| KPI and control framework | Coverage, completeness, freshness, approval, lineage, usage, exception and service measures. | Governance forums and assurance teams | Baseline data and reporting capacity |