Firstly, your organisation needs to understand what data is has and how it connects.  What data feeds business processes; what comes in and what goes out to the next process in line.

It is not always clear if the data custodians know what data they hold is used where and for what exacting purpose.