Data and Information Inventory and Attributes

Systems Deployment Pipelines move Data and Information types across environments as part of the application lifecycle. The Systems Deployment Pipelines Inventory (not yet published — refer to the IF4IT Enterprise Inventory Management Best Practices document) will govern the multi-environment deployment containers through which applications and their data move from Development through Production.

The most governance-sensitive cross-environment data flow is Production-to-non-Production: when Production data containing PII, PHI, or other sensitive content is copied into Development, Testing, or UAT environments for testing purposes. The Related Systems Deployment Pipelines relationship attribute in this inventory will surface which deployment pipelines move each Data and Information type across environments, enabling targeted data sanitization governance.

When established, this relationship completes the data governance picture across the full Systems Deployment Pipeline: which data types flow through which pipelines, in which environments, with what sensitivity, and under what sanitization requirements? These questions are essential for both data privacy compliance and secure software development lifecycle governance.