"The challenge posed by data governance, however, is particularly difficult to address because it is not clear whether the business or IT is responsible for data governance and what roles each should play." . . . .