Driven by regulatory instruments and the deployment of advanced anti-money laundering (AML) technologies, banks are facing the key organisational challenge of AML-related information governance (IG). This study aims to present an IG maturity model and self-assessment tool that may be used by banks and other financial institutions for the purposes of developing their IG capability.
A qualitative approach was taken to the development of the IG maturity model. This proceeded through four steps: framework selection, empirical data collection via 50 interviews with IG stakeholders, thematic analysis including maturity assessment and model development, model validation and stakeholder review.
The thematic analysis identified 347 unique IG practices across the eight banks. These practices were categorised into procedural practices, structural practices and relational practices. An IG maturity model was developed by adapting the Data Management Institute Data Maturity Model (DAMA, 2025). The key role played by the banks’ organisational context in influencing the development of IG practices was also identified.
The implications for studying the organisational conditions enabling the development of banks’ IG practices and the consequences for mitigating the risks of money laundering are discussed.
This study develops an IG maturity model and self-assessment tool for banks to assess their IG capability.
The value of this study rests in developing an IG maturity model that incorporates the assessment and development of relational IG practices that can aid in achieving organisation-wide IG integration and co-ordination.
