Purpose. Driven by regulatory instruments and the deployment of advanced anti-money laundering (AML) technologies, banks are facing the key organisational challenge of AML-related information
governance. This article presents an information governance (IG) maturity model and self-assessment tool that may be used by banks and other financial institutions for the purposes of developing their IG capability.
Design/methodology/approach. A qualitative approach was taken to the development of the IG maturity model. This proceeded through four steps: framework selection, empirical data collection via fifty interviews with IG stakeholders, thematic analysis including maturity assessment and model development, model validation and stakeholder review.
Findings. The thematic analysis identified 347 unique IG practices across the eight banks. These practices were categorised into procedural practices, structural practices, and relational practices. An IG maturity model was developed by adapting the Data Management Institute (DAMA) Data Maturity Model (DAMA, 2025). The key role played by the banks’ organisational context in influencing the development of IG practices was also identified.
Research limitations/implications. The implications for studying the organisational conditions enabling the development of banks IG practices and their consequences for mitigating the risks of
money laundering are discussed.
Practical implications. The study develops an IG maturity model and self-assessment tool for banks to assess their IG capability.
Originality/value. The value of the article rests in developing an IG maturity model that incorporates the assessment and development of relational IG practices that can aid in achieving organisation-wide IG integration and coordination.
CORE (COnnecting REpositories)
CORE (COnnecting REpositories)