Skip to content

Evidence request lists

ISO 8000 - Data Quality

Evidence request list. 29 controls, 29 carrying auditor artefact guidance. Generated from the compliance knowledge graph on 11 September 2026. Published by The Art of Service.

Accuracy

ISO8000-130
Master Data: Accuracy

Define and exchange master data accuracy metadata so consumers can judge fitness for purpose.

Artefacts an auditor will ask for
  • Accuracy measurement results
  • Profiling reports
  • Data quality scorecards
Where this commonly fails
  • Accuracy measured once, not monitored
  • No fitness-for-use statement

Assessment Method

ISO8000-65
Data Quality Management Maturity Assessment Method

Apply the standard assessment method to score data quality maturity consistently across business units.

Artefacts an auditor will ask for
  • Assessor qualification records
  • Evidence binder
  • Consolidated rating sheets
Where this commonly fails
  • Inconsistent scoring across assessors
  • No evidence retention policy

Completeness

ISO8000-140
Master Data: Completeness

Measure and exchange completeness of master data attributes relative to a required attribute set.

Artefacts an auditor will ask for
  • Required attribute lists
  • Completeness reports
  • Exception logs
Where this commonly fails
  • Required attribute set undefined
  • Mandatory fields populated with placeholders

DQ Management

ISO8000-61
Data Quality Management Process Reference Model

Implement the process reference model for data quality management covering planning, control, assurance, and improvement processes.

Artefacts an auditor will ask for
  • DQ process map
  • RACI for DQ processes
  • Process performance metrics
Where this commonly fails
  • Processes exist informally with no documented owners
  • No linkage to ISO 9001 QMS

Data Quality Management

ISO-8000-DQM-01
Quality Framework

ISO 8000-8 information and data quality dimensions. Accuracy, completeness, consistency, timeliness, accessibility, compliance. Data quality requirements specification. Quality measurement. Quality improvement.

Artefacts an auditor will ask for
  • Data quality management plan
  • Quality framework document
  • Maturity assessment
  • Quality dimensions catalog
Where this commonly fails
  • Quality not measured
  • Framework not adopted across domains
  • Maturity stagnant
  • Dimension definitions inconsistent
ISO-8000-DQM-02
Process Maturity

ISO 8000-61 process reference model. ISO 8000-62 maturity assessment. Five maturity levels. Process capability determination. Data governance process. Data quality process. Continuous improvement.

Artefacts an auditor will ask for
  • Data quality management plan
  • Quality framework document
  • Maturity assessment
  • Quality dimensions catalog
Where this commonly fails
  • Quality not measured
  • Framework not adopted across domains
  • Maturity stagnant
  • Dimension definitions inconsistent
ISO-8000-DQM-03
Master Data Quality

ISO 8000-100 series. Master data exchange quality. Syntactic quality (ISO 8000-110). Encoding quality (ISO 8000-115). Semantic quality (ISO 8000-120). Completeness (ISO 8000-130). Provenance.

Artefacts an auditor will ask for
  • Data quality management plan
  • Quality framework document
  • Maturity assessment
  • Quality dimensions catalog
Where this commonly fails
  • Quality not measured
  • Framework not adopted across domains
  • Maturity stagnant
  • Dimension definitions inconsistent
ISO8000-DQM-01
Data Quality Management System

Establish, implement, and maintain a data quality management system. Data quality policy. Quality objectives. Roles and responsibilities. Resource allocation for data quality.

Artefacts an auditor will ask for
  • Data quality management plan
  • Quality framework document
  • Maturity assessment
  • Quality dimensions catalog
Where this commonly fails
  • Quality not measured
  • Framework not adopted across domains
  • Maturity stagnant
  • Dimension definitions inconsistent
ISO8000-DQM-02
Data Quality Dimensions

Measure data against quality dimensions: accuracy, completeness, consistency, timeliness, validity, uniqueness, and integrity. Define quality thresholds and metrics for each dimension.

Artefacts an auditor will ask for
  • Data quality management plan
  • Quality framework document
  • Maturity assessment
  • Quality dimensions catalog
Where this commonly fails
  • Quality not measured
  • Framework not adopted across domains
  • Maturity stagnant
  • Dimension definitions inconsistent
ISO8000-DQM-03
Process Maturity

Assess organisational data quality process maturity. Six maturity levels from initial to optimising. Improvement roadmap based on maturity assessment. Benchmarking capabilities.

Artefacts an auditor will ask for
  • Data quality management plan
  • Quality framework document
  • Maturity assessment
  • Quality dimensions catalog
Where this commonly fails
  • Quality not measured
  • Framework not adopted across domains
  • Maturity stagnant
  • Dimension definitions inconsistent

Foundations

ISO8000-8
Information and Data Quality Concepts

Establish shared definitions for information and data quality, including syntactic, semantic, and pragmatic dimensions used across the organisation.

Artefacts an auditor will ask for
  • Data quality glossary
  • Concept model document
  • Cross-team alignment minutes
Where this commonly fails
  • Terminology drift across business units
  • No semantic layer documented

Framework

ISO8000-150
Master Data Quality Management Framework

Adopt the master data quality management framework covering data architecture, governance, operations, and assurance.

Artefacts an auditor will ask for
  • MDM policy
  • Stewardship roles
  • Operating model documentation
Where this commonly fails
  • No executive sponsor
  • Stewardship is informal

Governance

ISO8000-DG
Data Governance Integration

Integrate ISO 8000 requirements into data governance bodies, charters, and decision rights.

Artefacts an auditor will ask for
  • Data governance charter
  • Council minutes
  • Decision logs
Where this commonly fails
  • Governance council inactive
  • Decisions not recorded

Identifiers

ISO8000-115
Quality Identifiers

Use and exchange identifiers that are unique, persistent, and resolvable across systems and trading partners.

Artefacts an auditor will ask for
  • Identifier registry
  • Resolution service logs
  • Cross-reference tables
Where this commonly fails
  • Duplicate identifiers across systems
  • No persistence policy
ISO8000-116
Application of Authoritative Legal Entity Identifiers

Apply authoritative legal entity identifiers such as LEI in master data to support unambiguous party identification.

Artefacts an auditor will ask for
  • LEI registration records
  • Vendor and customer party files
  • LEI refresh procedure
Where this commonly fails
  • LEI not refreshed annually
  • Internal IDs not mapped to LEI

Master Data

ISO8000-100
Master Data Exchange Overview

Provide overview and architecture for master data quality and exchange across organisational boundaries.

Artefacts an auditor will ask for
  • Master data architecture document
  • Exchange use cases
  • Interface inventory
Where this commonly fails
  • No canonical master data model
  • Point-to-point integrations without standards
ISO8000-110
Master Data: Syntax, Semantic Encoding, and Conformance

Ensure master data messages conform to formal syntax, identifier semantics, and data dictionary references.

Artefacts an auditor will ask for
  • XML or JSON schemas
  • Data dictionary
  • Conformance test reports
Where this commonly fails
  • Schema not versioned
  • No conformance check before exchange

Master Data and Governance

ISO8000-MDG-01
Master Data Quality

Quality requirements for master data exchange. Provenance information for master data records. Syntactic and semantic quality requirements. Data portability between systems.

Artefacts an auditor will ask for
  • Master data policy
  • Quality measurement dashboard
  • Data steward charter
  • Improvement roadmap
Where this commonly fails
  • No master data ownership
  • Quality measured in isolation
  • Steward role unfilled
  • Improvement not prioritized
ISO8000-MDG-02
Data Quality Measurement

Systematic measurement of data quality. Quality indicators and scoring. Automated data quality monitoring. Trend analysis and reporting. Root cause analysis for quality failures.

Artefacts an auditor will ask for
  • Master data policy
  • Quality measurement dashboard
  • Data steward charter
  • Improvement roadmap
Where this commonly fails
  • No master data ownership
  • Quality measured in isolation
  • Steward role unfilled
  • Improvement not prioritized
ISO8000-MDG-03
Continuous Improvement

Data quality improvement lifecycle: define, measure, analyse, improve, control (DMAIC). Corrective and preventive actions. Quality management reviews. Integration with business processes.

Artefacts an auditor will ask for
  • Master data policy
  • Quality measurement dashboard
  • Data steward charter
  • Improvement roadmap
Where this commonly fails
  • No master data ownership
  • Quality measured in isolation
  • Steward role unfilled
  • Improvement not prioritized

Maturity

ISO8000-64
Data Quality Management Maturity Assessment Indicators

Use defined indicators to compute maturity levels for each data quality management process area.

Artefacts an auditor will ask for
  • Indicator catalogue
  • Scoring worksheets
  • Evidence references
Where this commonly fails
  • Indicators chosen ad hoc
  • Evidence not tied to indicators

Maturity Assessment

ISO8000-62
Organizational Data Quality Management Maturity

Assess the organisation's data quality management maturity against the defined capability levels and identify improvement actions.

Artefacts an auditor will ask for
  • Maturity assessment report
  • Capability scorecards
  • Improvement roadmap
Where this commonly fails
  • Self-assessment only, no independent review
  • No baseline to measure progress

Measurement

ISO8000-63
Data Quality Management Process Measurement

Measure data quality management process performance using defined indicators and report results to management.

Artefacts an auditor will ask for
  • DQ KPI definitions
  • Measurement reports
  • Management review records
Where this commonly fails
  • Vanity metrics rather than outcome metrics
  • KPIs not reviewed at management level

Monitoring

ISO8000-MON
Continuous Data Quality Monitoring

Continuously monitor data quality against thresholds and trigger remediation when defects exceed limits.

Artefacts an auditor will ask for
  • Monitoring dashboards
  • Threshold definitions
  • Incident tickets
Where this commonly fails
  • Dashboards exist but no thresholds
  • No remediation SLA

Overview

ISO8000-1
Overview

Understand the overall structure of the ISO 8000 series and the relationships between its parts.

Artefacts an auditor will ask for
  • Series mapping document
  • Applicability statement
  • Training records
Where this commonly fails
  • Teams unaware of which parts apply
  • No mapping to internal policy

Product Data

ISO8000-311
Application of Product Data Quality for Manufacturing

Apply product data quality requirements in manufacturing supply chains using standardised dictionaries.

Artefacts an auditor will ask for
  • Product classification mapping
  • Attribute conformance reports
  • Supplier data exchange records
Where this commonly fails
  • Free-text descriptions instead of dictionary attributes
  • No supplier onboarding checks

Provenance

ISO8000-120
Master Data: Provenance

Capture and exchange provenance metadata for master data, including source, responsible party, and processing history.

Artefacts an auditor will ask for
  • Provenance metadata schema
  • Lineage diagrams
  • Source-to-target mappings
Where this commonly fails
  • Lineage stops at warehouse boundary
  • No source attribution captured

Sector Application

ISO8000-66
Assessment of Data Quality Management in Manufacturing

Apply the maturity model in manufacturing contexts covering product data, supplier data, and production records.

Artefacts an auditor will ask for
  • Manufacturing data scope statement
  • Domain-specific KPIs
  • Pilot assessment results
Where this commonly fails
  • Product master data excluded from scope
  • No tie to MES or ERP records

Vocabulary

ISO8000-2
Vocabulary

Use the standard vocabulary so terms like accuracy, completeness, and consistency carry consistent meaning.

Artefacts an auditor will ask for
  • Internal glossary citing ISO 8000-2
  • Training material
  • Style guide
Where this commonly fails
  • Marketing redefines DQ terms loosely
  • Glossary not maintained
Assembled from the framework's own control set. Every line traces to a control in the graph, so this pack is regenerated rather than written, and stays current as the graph does.

Assembled from the framework’s own control set, so this list is regenerated rather than written and stays current as the graph does. See the ISO 8000 - Data Quality framework page.