Data governance is the set of rules, roles, and technical controls that define how data is collected, labeled, stored, shared, protected, and audited. It covers basics such as ownership, retention, access permissions, quality checks, and logging. Good governance tells an organization not only where data lives, but also who may use it and how it can be trusted.
In cyber security, data governance matters because attackers often target the data layer rather than the application itself. Weak controls can lead to unauthorized access, data poisoning, tampering with training datasets, or misuse of sensitive information. Strong governance helps defenders enforce least privilege, track provenance, detect changes, and prove compliance. In AI-heavy workflows, it is especially important: bad or unverified input data can produce unsafe outputs at scale, while clear audit trails make it easier to spot manipulation and recover from incidents.