MRTB 1113 Data Governance Assessment Brief 2026 | UTM Malaysia

i. Q2.1 [Level 5 – 10 marks]

Develop a Rich Picture that visualises MSC’s data governance situation. Your rich picture should clearly illustrate:

• key stakeholders, such as the Mayor’s Office, departments, IT Unit, vendors, citizens, and regulators;
• main data assets and flows, such as complaint data, traffic data, parking data, CCTV- related data, location data, and service performance data;
• conflicts, tensions, bottlenecks, or unclear responsibilities in data ownership and data sharing;
• privacy, ethical, legal, and public trust pressures affecting the use of smart city data;
• possible governance intervention points, such as a Data Governance Council, data owner, data steward, approval workflow, or data sharing agreement.

You may create the rich picture using hand- drawn sketches or digital drawing tools (e.g., draw.io, PowerPoint, Visio, Miro, Lucidchart). Al- generated diagrams, images, or automated visualisations are not allowed. Students must produce the rich picture themselves.

Sample of Rich Picture:

For illustration purposes only. You must draw your own rich picture with reference to MSC case).

ii. Q2.2 [Level 4 – 3 marks]

Based on your rich picture, identify THREE (3) priority data assets or data domains that MSC should govern first. Present your answer in a simple table with the following columns: Data Asset / Domain, Main Stakeholders, Why It Should Be Prioritised.

iii. Q2.3 [Level 5 – 7 marks]

Construct a practical RACI table for MSC’s data governance structure. Your table must use suitable job titles or governance bodies from the case and clearly assign responsibility for key data governance activities across departments and vendors. Your RACI table should include at least FOUR (4) roles or bodies, such as:

• Data Governance Council
• Chief Data Officer or senior sponsor from the Mayor’s Office
• Departmental Data Owners
• Data Stewards
• IT/Data Custodians
• Vendor Data Liaison or Contract Owner

Your table should include at least FIVE activities related to data ownership, data definition, data sharing approval, access control, vendor- managed data, or issue escalation.

(20 marks)

Question 3

Innova Retail Solutions Sdn. Bhd. is a medium- sized company in Malaysia that provides e- commerce and customer management services to more than 200,000 active users. The company has approximately 350 employees and several branches located in Kuala Lumpur, Johor Bahru, and Penang.Over the past few years, the company has experienced several issues related to data management, including:

• Customer data is stored across multiple systems without clear standards.
• Employees share customer files using personal cloud storage applications without proper security controls.
• Outdated customer records have caused delivery and operational errors.
• The company does not have any formal policies related to data compliance or information security.
• Top management has recently decided to implement Data Governance (DG) practices to ensure compliance with the Personal Data Protection Act (PDPA) Malaysia and information security best practices based on ISO 27001.

As a Data Governance consultant, you are required to assist the company in developing basic operational policies to initiate its Data Governance implementation.

i. Q3.1 [Level 2-5 marks]

Identify and explain THREE (3) major data management issues faced by the company based on the case study above. Discuss the impact of these issues on the organization’s operations.

ii. Q3.2 [Level 5-10 marks]

Recommend TWO (2) operational Data Governance policies that are suitable for the company during the initial stage of implementation. The policies may include Data Compliance Policy, Data Security Policy, Data Access Policy, Data Quality Policy, or any other relevant policy. For each policy:

• State the objective of the policy
• Explain at least THREE (3) key components of the policy
• Discuss how the policy supports compliance with Malaysia Personal Data Protection Act 2010 [Act 709]
  text-align: right;”

(15 marks)

Question 4

Reflective Use of Generative AI

Generative AI tools such as ChatGPT, Gemini, Copilot and Claude are commonly used to support academic tasks. To ensure responsible use, students must demonstrate critical judgement, awareness of limitations, and ethical reflection when integrating AI-generated content into their PMA answers. This question evaluates how you used Generative AI while completing Q1, Q2, and Q3 in this assessment.

i. Q4.1 [Level 3 – 6 marks]

State whether you used any Generative AI tools while completing this PMA.

If AI tools were used, name the tools and explain the purpose of using each tool (e.g., brainstorming, summarising, drafting, concept clarification).

If no AI tools were used, briefly explain your alternative approach to completing the assessment (e.g., literature review, independent research, discussions with peers, lecture materials).

ii. Q4.2 [Level 6 – 4 marks]

Append your AI prompt history in the Appendix as evidence (you may provide screenshots). Each item must be clearly labelled according to the question it supports (e.g., Q1 – AI Prompt 1, Q2 – AI Output 2 etc.). Assess how this evidence demonstrates transparency and responsible AI use.