Skip to content

Evidence request lists

ISO/IEC 25012:2008 - Data Quality Model

Evidence request list. 36 controls, 36 carrying auditor artefact guidance. Generated from the compliance knowledge graph on 11 September 2026. Published by The Art of Service.

Data Quality Model Application

ISO-25012-5.1
Establishing data quality requirements

Guidance on using the data quality model to establish requirements for target data in specific contexts of use.

Artefacts an auditor will ask for
  • Quality model documentation
  • Characteristic measurement plan
  • Quality evaluation report
  • Quality requirements
Where this commonly fails
  • Characteristics not weighted
  • Inherent vs system mix-up
  • Measurement irregular
  • Evaluation not formalized
ISO-25012-5.2
Defining data quality measures

Guidance on defining measurable indicators for each data quality characteristic relevant to the context.

Artefacts an auditor will ask for
  • Quality model documentation
  • Characteristic measurement plan
  • Quality evaluation report
  • Quality requirements
Where this commonly fails
  • Characteristics not weighted
  • Inherent vs system mix-up
  • Measurement irregular
  • Evaluation not formalized
ISO-25012-5.3
Planning and performing data quality evaluations

Guidance on planning and conducting evaluations of data quality against defined requirements and measures.

Artefacts an auditor will ask for
  • Quality model documentation
  • Characteristic measurement plan
  • Quality evaluation report
  • Quality requirements
Where this commonly fails
  • Characteristics not weighted
  • Inherent vs system mix-up
  • Measurement irregular
  • Evaluation not formalized

Governance

25012-Governance
Data Quality Governance

Assign data ownership, stewardship, and quality accountability roles supported by policy and process.

Artefacts an auditor will ask for
  • Data governance policy
  • Steward register
  • Owner appointments
Where this commonly fails
  • No data owners
  • Stewardship informal

Inherent

25012-Accuracy
Accuracy

Degree to which data has attributes that correctly represent the true value of intended attributes in a specific context of use.

Artefacts an auditor will ask for
  • Accuracy measurement reports
  • Source-of-truth reconciliation
  • Error rate metrics
Where this commonly fails
  • No accuracy baseline
  • No source-of-truth defined
25012-Completeness
Completeness

Degree to which subject data has values for all expected attributes and related entity instances in a specific context.

Artefacts an auditor will ask for
  • Null rate reports
  • Mandatory-field rules
  • Coverage analysis
Where this commonly fails
  • Mandatory fields not defined
  • Null rates unmonitored
25012-Consistency
Consistency

Degree to which data has attributes that are free from contradiction and coherent with other data in a specific context of use.

Artefacts an auditor will ask for
  • Cross-system reconciliation reports
  • Referential integrity checks
  • Conflict resolution log
Where this commonly fails
  • No cross-system reconciliation
  • Referential integrity not enforced
25012-Credibility
Credibility

Degree to which data has attributes that are regarded as true and believable by users in a specific context.

Artefacts an auditor will ask for
  • Source authorisation records
  • Data steward sign-off
  • Trust scoring
Where this commonly fails
  • Sources not authorised
  • No data steward
25012-Currentness
Currentness

Degree to which data has attributes that are of the right age in a specific context of use.

Artefacts an auditor will ask for
  • Refresh schedules
  • Age-of-data metrics
  • Freshness SLAs
Where this commonly fails
  • No freshness SLA
  • Refresh not monitored

Inherent Data Quality Characteristics

ISO-25012-4.1
Accuracy

The degree to which data has attributes that correctly represent the true value of the intended attribute of a concept or event in a specific context of use.

Artefacts an auditor will ask for
  • Quality model documentation
  • Characteristic measurement plan
  • Quality evaluation report
  • Quality requirements
Where this commonly fails
  • Characteristics not weighted
  • Inherent vs system mix-up
  • Measurement irregular
  • Evaluation not formalized
ISO-25012-4.2
Completeness

The degree to which subject data associated with an entity has values for all expected attributes and related entity instances.

Artefacts an auditor will ask for
  • Quality model documentation
  • Characteristic measurement plan
  • Quality evaluation report
  • Quality requirements
Where this commonly fails
  • Characteristics not weighted
  • Inherent vs system mix-up
  • Measurement irregular
  • Evaluation not formalized
ISO-25012-4.3
Consistency

The degree to which data has attributes that are free from contradiction and are coherent with other data in a specific context of use.

Artefacts an auditor will ask for
  • Quality model documentation
  • Characteristic measurement plan
  • Quality evaluation report
  • Quality requirements
Where this commonly fails
  • Characteristics not weighted
  • Inherent vs system mix-up
  • Measurement irregular
  • Evaluation not formalized
ISO-25012-4.4
Credibility

The degree to which data has attributes that are regarded as true and believable by users in a specific context of use.

Artefacts an auditor will ask for
  • Quality model documentation
  • Characteristic measurement plan
  • Quality evaluation report
  • Quality requirements
Where this commonly fails
  • Characteristics not weighted
  • Inherent vs system mix-up
  • Measurement irregular
  • Evaluation not formalized
ISO-25012-4.5
Currentness

The degree to which data has attributes that are of the right age in a specific context of use (timeliness of the data).

Artefacts an auditor will ask for
  • Quality model documentation
  • Characteristic measurement plan
  • Quality evaluation report
  • Quality requirements
Where this commonly fails
  • Characteristics not weighted
  • Inherent vs system mix-up
  • Measurement irregular
  • Evaluation not formalized

Inherent and System-Dependent

25012-Accessibility
Accessibility

Degree to which data can be accessed in a specific context of use, particularly by people who need supporting technology or special configuration.

Artefacts an auditor will ask for
  • Access path documentation
  • Accessibility test results
  • Assistive-tech support evidence
Where this commonly fails
  • No assistive-tech support
  • Access paths undocumented
25012-Compliance
Compliance

Degree to which data has attributes that adhere to standards, conventions, or regulations in force and similar rules relating to data quality.

Artefacts an auditor will ask for
  • Regulatory mapping
  • Standards conformance reports
  • Audit findings
Where this commonly fails
  • No regulatory mapping
  • Standards not identified
25012-Confidentiality
Confidentiality

Degree to which data has attributes that ensure it is only accessible and interpretable by authorised users in a specific context.

Artefacts an auditor will ask for
  • Classification scheme
  • Access reviews
  • Encryption configuration
Where this commonly fails
  • No classification
  • Access not reviewed
25012-Efficiency
Efficiency

Degree to which data has attributes that can be processed and provide expected levels of performance using appropriate resources.

Artefacts an auditor will ask for
  • Query performance metrics
  • Storage efficiency reports
  • Resource utilisation
Where this commonly fails
  • No performance baseline
  • Bloat unmanaged
25012-Precision
Precision

Degree to which data has attributes that are exact or that provide discrimination in a specific context of use.

Artefacts an auditor will ask for
  • Precision specifications
  • Rounding policies
  • Unit-of-measure controls
Where this commonly fails
  • Precision unspecified
  • Mixed units
25012-Traceability
Traceability

Degree to which data has attributes that provide an audit trail of access and changes to it in a specific context of use.

Artefacts an auditor will ask for
  • Change history logs
  • Lineage diagrams
  • Audit trail retention policy
Where this commonly fails
  • No lineage
  • Audit logs purged early
25012-Understandability
Understandability

Degree to which data has attributes that enable it to be read and interpreted by users, expressed in appropriate languages, symbols, and units.

Artefacts an auditor will ask for
  • Data dictionary
  • Glossary
  • Symbol and unit conventions
Where this commonly fails
  • No data dictionary
  • Terms ambiguous

Inherent and System-Dependent Data Quality Characteristics

ISO-25012-4.10
Precision

The degree to which data has attributes that are exact or that provide discrimination in a specific context of use.

Artefacts an auditor will ask for
  • Quality model documentation
  • Characteristic measurement plan
  • Quality evaluation report
  • Quality requirements
Where this commonly fails
  • Characteristics not weighted
  • Inherent vs system mix-up
  • Measurement irregular
  • Evaluation not formalized
ISO-25012-4.11
Traceability

The degree to which data has attributes that provide an audit trail of access and changes to the data.

Artefacts an auditor will ask for
  • Quality model documentation
  • Characteristic measurement plan
  • Quality evaluation report
  • Quality requirements
Where this commonly fails
  • Characteristics not weighted
  • Inherent vs system mix-up
  • Measurement irregular
  • Evaluation not formalized
ISO-25012-4.12
Understandability

The degree to which data has attributes that enable it to be read and interpreted by users and are expressed in appropriate languages, symbols, and units.

Artefacts an auditor will ask for
  • Quality model documentation
  • Characteristic measurement plan
  • Quality evaluation report
  • Quality requirements
Where this commonly fails
  • Characteristics not weighted
  • Inherent vs system mix-up
  • Measurement irregular
  • Evaluation not formalized
ISO-25012-4.6
Accessibility

The degree to which data can be accessed in a specific context of use, particularly by people who need assistive technology.

Artefacts an auditor will ask for
  • Quality model documentation
  • Characteristic measurement plan
  • Quality evaluation report
  • Quality requirements
Where this commonly fails
  • Characteristics not weighted
  • Inherent vs system mix-up
  • Measurement irregular
  • Evaluation not formalized
ISO-25012-4.7
Compliance

The degree to which data has attributes that adhere to standards, conventions, or regulations in force and similar rules.

Artefacts an auditor will ask for
  • Quality model documentation
  • Characteristic measurement plan
  • Quality evaluation report
  • Quality requirements
Where this commonly fails
  • Characteristics not weighted
  • Inherent vs system mix-up
  • Measurement irregular
  • Evaluation not formalized
ISO-25012-4.8
Confidentiality

The degree to which data has attributes that ensure it is only accessible and interpretable by authorized users.

Artefacts an auditor will ask for
  • Quality model documentation
  • Characteristic measurement plan
  • Quality evaluation report
  • Quality requirements
Where this commonly fails
  • Characteristics not weighted
  • Inherent vs system mix-up
  • Measurement irregular
  • Evaluation not formalized
ISO-25012-4.9
Efficiency

The degree to which data has attributes that can be processed and provide the expected levels of performance using appropriate resources.

Artefacts an auditor will ask for
  • Quality model documentation
  • Characteristic measurement plan
  • Quality evaluation report
  • Quality requirements
Where this commonly fails
  • Characteristics not weighted
  • Inherent vs system mix-up
  • Measurement irregular
  • Evaluation not formalized

Process

25012-Remediation
Data Quality Remediation

Triage, root-cause, and remediate data quality defects with tracked closure and prevention measures.

Artefacts an auditor will ask for
  • Defect register
  • Root-cause records
  • Preventive action evidence
Where this commonly fails
  • Defects not tracked
  • No root cause

Programme

25012-Measurement
Data Quality Measurement Programme

Establish a programme to measure, monitor, and report data quality characteristics over time.

Artefacts an auditor will ask for
  • Measurement plan
  • Dashboard screenshots
  • Trend reports
Where this commonly fails
  • No measurement plan
  • No trending

System-Dependent

25012-Availability
Availability

Degree to which data has attributes that enable it to be retrieved by authorised users or applications in a specific context of use.

Artefacts an auditor will ask for
  • Uptime reports
  • Availability SLAs
  • Incident logs
Where this commonly fails
  • No SLA
  • Uptime untracked
25012-Portability
Portability

Degree to which data has attributes that enable it to be installed, replaced, or moved from one system to another while preserving quality.

Artefacts an auditor will ask for
  • Export procedures
  • Format documentation
  • Migration test reports
Where this commonly fails
  • No standard export format
  • Migration untested
25012-Recoverability
Recoverability

Degree to which data has attributes that enable it to maintain and preserve a specified level of operations and quality, even in the event of failure, in a specific context of use.

Artefacts an auditor will ask for
  • Backup procedures
  • Restore test results
  • RPO and RTO definitions
Where this commonly fails
  • Restores untested
  • RPO/RTO not defined

System-Dependent Data Quality Characteristics

ISO-25012-4.13
Availability

The degree to which data has attributes that enable it to be retrieved by authorized users or applications in a specific context of use.

Artefacts an auditor will ask for
  • Quality model documentation
  • Characteristic measurement plan
  • Quality evaluation report
  • Quality requirements
Where this commonly fails
  • Characteristics not weighted
  • Inherent vs system mix-up
  • Measurement irregular
  • Evaluation not formalized
ISO-25012-4.14
Portability

The degree to which data has attributes that enable it to be installed, replaced, or moved from one system to another.

Artefacts an auditor will ask for
  • Quality model documentation
  • Characteristic measurement plan
  • Quality evaluation report
  • Quality requirements
Where this commonly fails
  • Characteristics not weighted
  • Inherent vs system mix-up
  • Measurement irregular
  • Evaluation not formalized
ISO-25012-4.15
Recoverability

The degree to which data has attributes that enable it to maintain and preserve a specified level of operations and quality, even in the event of failure.

Artefacts an auditor will ask for
  • Quality model documentation
  • Characteristic measurement plan
  • Quality evaluation report
  • Quality requirements
Where this commonly fails
  • Characteristics not weighted
  • Inherent vs system mix-up
  • Measurement irregular
  • Evaluation not formalized
Assembled from the framework's own control set. Every line traces to a control in the graph, so this pack is regenerated rather than written, and stays current as the graph does.

Assembled from the framework’s own control set, so this list is regenerated rather than written and stays current as the graph does.