Skip to main content
critical data elementsCDEcritical data element bankingBCBS 239regulatory reporting datadata ownership

What Are Critical Data Elements (CDEs)?

Critical data elements, usually shortened to CDEs, are the small set of data points an organization cannot afford to get wrong: the fields behind regulatory reports, financial statements, risk models, and key business decisions. Instead of trying to govern every column with the same care, a CDE program picks the data that matters most and gives it named owners, written definitions, quality rules, and traceable lineage.

The idea is common across industries, but it is most established in banking, where supervisors expect firms to show that the numbers in their risk and regulatory reports are accurate, complete, and explainable. A clear CDE list is often the first thing a data governance program can show an examiner.

TL;DR

A critical data element is a data point whose error would materially affect regulatory reporting, financial results, risk measurement, or customers. Typical CDEs in a bank include customer identifiers, exposure amounts, default dates, and collateral values. For each CDE, document a business definition, an accountable owner and steward, the source systems and lineage, and data quality rules with thresholds. Keep the list short. CDEs are where supervisory principles such as BCBS 239, accounting standards such as CECL, and stress tests such as CCAR and DFAST meet day-to-day data governance.

What Is a Critical Data Element?

A critical data element is a business concept, such as "customer ID," "outstanding balance," or "probability of default," that is important enough to govern with the highest care, together with every column across systems that holds it. Microsoft describes CDEs in its Purview documentation as a logical grouping of important columns across tables, so that "CustID" in one system and "CID" in another can be governed as one element.

Two things make a data element critical:

  • Impact. An error would materially misstate a regulatory report, a financial statement, a capital or liquidity measure, a model output, or a decision about a customer.
  • Use. The element feeds reports or processes that someone outside the data team relies on: regulators, auditors, executives, or customers.

A CDE is therefore not a technical property of a column. It is a decision the business makes, records, and reviews.

Why CDEs Matter in Banking

Banks report large volumes of data to supervisors, and much of it is assembled from many source systems. When a regulator questions a number, the bank has to show where it came from, who is accountable for it, and how its quality is controlled. A CDE program focuses that effort on the data that matters.

  • Risk data aggregation. The Basel Committee's principles for effective risk data aggregation and risk reporting, known as BCBS 239, were published in January 2013 after the financial crisis showed that many banks could not aggregate risk exposures fully, quickly, and accurately. Accuracy, completeness, and timeliness of risk data are easier to prove for a defined set of elements.
  • Regulatory reporting. Call Reports, FR Y-9C, and the FR Y-14 stress testing schedules all depend on a core set of balances, exposures, and classifications. Treating those inputs as CDEs gives each one an owner and a quality standard.
  • Accounting and capital. Loan-level data drives the allowance for credit losses under CECL and the projected losses in supervisory stress tests. Errors in a few fields, such as origination date or charge-off amount, can move both.
  • Examinations and audits. Examiners and auditors ask how key figures are defined, sourced, and controlled. A documented CDE inventory answers those questions faster than reconstructing the path for each request.

The Basel Committee published its risk data aggregation principles because many banks "were unable to aggregate risk exposures and identify concentrations fully, quickly and accurately" during the financial crisis.

Basel Committee on Banking Supervision, Principles for effective risk data aggregation and risk reporting, January 2013

How to Identify Critical Data Elements

The most reliable way to find CDEs is to start from the outputs that matter and work backwards to the data, rather than starting from the database and guessing.

  1. List the critical outputs. Regulatory reports, financial statements, capital and liquidity calculations, key risk models, and the management reports executives act on.
  2. Trace each output to its inputs. Identify the business concepts each output uses, then follow their column-level lineage back to the source systems.
  3. Score each candidate. Rate regulatory impact, financial impact, customer impact, and how many critical outputs use the element. Elements that score high on impact or appear in many outputs become CDEs.
  4. Confirm with the business. The proposed owner agrees the element is critical and accepts accountability for it.
  5. Review on a cycle. New regulations, products, and reports change what is critical. A yearly review keeps the list current.
How to Identify Critical Data Elements FROM ALL DATA TO CRITICAL DATA ELEMENTS ALL DATA ELEMENTS every column across source systems, warehouses, and reports USED IN CRITICAL OUTPUTS regulatory reports, financial statements, risk models HIGH IMPACT IF WRONG scored for regulatory, financial, and customer impact CRITICAL DATA ELEMENTS confirmed by owners, governed with the highest care Start from the outputs that matter and trace back, not from the database forward
Click to enlarge

What to Document for Each CDE

A CDE is only governed when the information around it is written down and kept current. A practical minimum:

AttributeWhat it recordsExample
Business definitionWhat the element means, in business languageOutstanding principal balance at month end, excluding accrued interest
OwnerThe business leader accountable for the elementHead of retail credit risk
StewardThe person who maintains the definition and resolves issuesRetail credit data steward
Source systemsWhere the value originates and is storedLoan servicing system, data warehouse loan table
LineageThe path from source to each critical outputServicing system to warehouse to CECL model to Call Report
Quality rulesChecks that must pass, with thresholdsNot null, non-negative, reconciles to general ledger within tolerance
Critical outputsThe reports and models that use itCall Report, allowance for credit losses, FR Y-14Q
Review dateWhen the CDE status was last confirmedAnnual review, last confirmed in Q3

Linking each CDE to its business glossary term keeps the definition in one place, and linking it to physical columns keeps the lineage and quality checks attached to the data they describe.

Critical Data Elements vs Business Terms vs Data Elements

ConceptWhat it isHow many
Data elementAny field or column in any systemThousands to millions
Business termA defined business concept in the glossary, such as "customer" or "net revenue"Hundreds to thousands
Critical data elementA business concept, and the columns that carry it, designated for the highest level of governanceA deliberately short list

Every CDE should have a business term, but most business terms are not CDEs. And every CDE maps to data elements, usually several of them across systems.

Common Mistakes

  • Too many CDEs. When everything is critical, nothing is. A long list spreads owners and stewards thin and turns the program into paperwork.
  • Technical owners only. An IT owner can run the pipeline but cannot decide what the number should mean. Accountability belongs with the business.
  • No link to physical data. A CDE list in a spreadsheet, disconnected from the columns and reports, cannot show lineage or quality.
  • Quality rules without thresholds. "Must be accurate" is not a rule. Each check needs a measurable condition and a tolerance.
  • A one-time exercise. Products, systems, and regulations change. A list that is not reviewed drifts away from reality.

How Dawiso Supports It

Dawiso gives a CDE program a single place to record what is critical and why, connected to the data it describes.

  • Definitions in the business glossary. CDEs can be recorded as business terms or business indicators, with a definition and, for indicators, a calculation, in the business glossary.
  • Named owners and stewards. Each term carries an Owner and a Steward, so accountability is visible to everyone who uses the data.
  • Relations to physical data. Terms can be linked to related objects in the data catalog, such as tables, columns, and reports, so the definition and the data stay connected.
  • Lineage down to columns. Data lineage shows flows at system, table, and column level, which supports tracing a CDE from source to report and analyzing the impact of a change.
  • Workflows for approval. Configurable workflows move terms through states such as draft, review, and approved, so a change to a CDE definition goes through the right people.

For the banking context around CDEs, see Dawiso for financial services.

Conclusion

Critical data elements turn data governance from an attempt to control everything into a focused commitment on the data that matters most. Start from the outputs regulators, auditors, and executives rely on, trace them back to a short list of elements, and give each one an owner, a definition, lineage, and measurable quality rules. Review the list as the business changes. A bank that can answer "where does this number come from, and who owns it?" for every CDE is well prepared for both supervisors and its own decisions.

Sources

See it in action

Business Glossary

Clear context is essential to ensure everyone interprets terms consistently and accurately.

A cookie a day keeps bad UX away.

We use cookies to personalize content, ads and to analyze our traffic. We also share information about your use of our site with our advertising and analytics partners who may combine it with other information that you've provided to them or that they've collected from your use of their services. By clicking "Accept All", you allow us to use cookies for analytics and ads via Google Tag Manager. You can also customize cookies.

Customize Consent Preferences

We use cookies to personalize content, ads and to analyze our traffic. We also share information about your use of our site with our advertising and analytics partners. Privacy Policy

Necessary cookies allow core website functionality such as user login and account management. The website cannot be used properly without strictly necessary cookies.

Functionality cookies are used to remember visitor information on the website, eg. language, timezone, enhanced content.

Analytics cookies are used to see how visitors use the website, eg. analytics cookies. Those cookies cannot be used to directly identify a certain visitor.

We use Microsoft Clarity to see how you use our website (including heatmaps and session replays) so we can improve it. By using our site, you agree that we and Microsoft can collect and use this data. See our Privacy Policy for details.

Advertisement cookies are used to identify visitors between different websites, eg. content partners, banner networks. Those cookies may be used by companies to build a profile of visitor interests or show relevant ads on other websites.