Built Intelligence

Methodology Synthesis 01

Information Governance for Collaborative Delivery

What ISO 19650 actually requires a project to decide before it starts exchanging information — and the control structures that turn those decisions into something enforceable rather than aspirational.

Version 1.0 August 2026 Daniel Esmeral Jaramillo Open access

1. The failure this addresses

The economic case is not in dispute. The National Institute of Standards and Technology estimated the annual cost of inadequate interoperability in the U.S. capital facilities industry at approximately $15.8 billion, with roughly two-thirds of that burden falling on owners and operators during the operations and maintenance phase rather than during construction. The cost of information failure is paid mostly by whoever inherits the building.

What is less widely appreciated is that this failure persists on projects that did everything the technology literature recommends. Peer-reviewed research published in Automation in Construction documented a $113 million, 200,000-square-foot university research facility that had a formal BIM Execution Plan, applied COBie data formatting, and operated under an IPD collaboration philosophy — and whose automated data exchange into the computerized maintenance management system still failed at handover. The cause was not a missing standard or an unsuitable file format. It was the absence of dedicated information governance: no one held defined authority over what information had to exist, in what state, verified by whom, before it could be transferred.

That is the distinction this document is built on. A standard tells you what good information looks like. Governance determines whether anyone is obligated to produce it. Most projects have the first and not the second.

2. What ISO 19650 is actually asking for

ISO 19650 is frequently described as a BIM standard. It is more useful to read it as a procurement and accountability standard that happens to concern information. Its structure rests on a chain of requirements, each of which is a decision someone must make and own:

LayerThe question it answersWho must answer it
Organizational information requirementsWhat does the owner's business need to know about its assets?Owner, before procurement
Asset information requirementsWhat information must exist to operate and maintain the asset?Owner with facilities management
Project information requirementsWhat must the project produce to satisfy the above?Owner with lead appointed party
Exchange information requirementsWhat must each appointed party deliver, when, and in what state?Owner, written into the appointment
BIM execution planHow will the delivery team meet those requirements?Delivery team, in response
Common data environmentWhere does information live, and what governs movement between states?Defined before any exchange

Two observations follow, and they are the ones most often missed in practice.

First, the chain runs backward from operations. Asset information requirements are derived from what the owner will need once the building is running, not from what the design team finds convenient to model. A project that begins by asking "what should we model?" has already inverted the sequence, and will discover at handover that it modelled the wrong things in the wrong depth.

Second, exchange information requirements belong in the appointment — the contract — not in a technical appendix circulated after award. An information requirement that is not contractually owed is a request. Requests are honored when schedule and budget permit, which at handover is precisely when they do not.

3. The decisions to make before any information moves

The following sequence consolidates what ISO 19650-1 and 19650-2, the AIA digital practice documents (E203, G201, G202, G203), and the BIMForum LOD Specification each require, expressed as decisions rather than as documents. Each has a named owner and a point in the project at which it becomes irreversible in practice.

#DecisionConsequence of deferring it
1What asset information will operations require, expressed as data, not as documents?The model is built to a design logic and must be rebuilt for operations
2Which party is accountable for each information container?Gaps surface at handover, when the responsible party has demobilized
3What level of information need applies to each element, at each stage?Uniform over-modelling: cost without corresponding value
4What states exist in the common data environment, and who authorizes each transition?"Approved" becomes a description rather than a controlled status
5Who may read, edit, and issue within each state?Access is by convention; the audit trail cannot be reconstructed
6What check must an information container pass before issue?Verification collapses into whoever is available at the deadline
7Which naming and classification convention binds all parties?Reconciliation cost is transferred to the operator, permanently
8What happens to superseded information?Overwriting destroys the record of what was relied upon and when

Decision 8 deserves particular attention because it is the one most often treated as a storage question. It is a liability question. When a dispute arises over what information a party held at the moment it made a decision, the only admissible answer comes from a system that retained the superseded state rather than replacing it.

4. Three mechanisms that make governance enforceable

Decisions 4 through 8 above share a property: none of them survives contact with a live project on goodwill alone. Each requires a technical control that makes the intended behavior the only available behavior. In practice there are three, and they are worth naming separately because teams routinely implement the first and assume it covers the other two.

Role-based permission — who may act

Groups of users are granted defined capabilities against defined classes of information. This is the control most systems implement, and the one most teams stop at. On its own it is insufficient, because it governs the type of information a role may touch, not which instances.

Record-level visibility — which instances they may see

Rules restricting a role to the specific records it is entitled to, rather than to the whole class. On a multi-party project this is what allows genuinely shared infrastructure: a trade contractor operating inside the common data environment sees its own scope, not every party's commercial position. Without it, teams fall back on separate systems per party — which reintroduces exactly the fragmentation the common data environment was intended to eliminate.

Immutability of closed states — when information may change at all

Once a container is approved and issued, or a period is closed, it becomes fixed. Later corrections are made as new revisions, not as edits to the prior one. This is the least commonly implemented of the three and the one that determines whether the record is evidentially useful, because it is what makes "this is what we held on that date" a verifiable statement rather than an assertion.

On implementation

These three controls are not theoretical. In a multi-entity commercial real estate operation the author administers — eighty leased units across twelve buildings, held by several distinct owners including units in undivided co-ownership — all three are in production: role groups governing capability, record rules governing row-level visibility, and accounting period locks that place closed periods beyond any user's ability to edit, the author's own included. The controls transfer directly because the underlying problem is the same one: several parties with divergent interests operating over shared information that has to remain reliable for whoever inherits it.

5. A minimum viable governance regime

Full ISO 19650 conformance is out of reach for most small and mid-sized firms, and pursuing it as an all-or-nothing proposition is why many never begin. The following is a reduced set that captures most of the available benefit and can be written into an appointment without specialist support:

  1. A single named individual accountable for information on the project, with the authority to refuse an issue that fails its check. Not a committee.
  2. Exchange information requirements attached to the contract, listing deliverables, formats, timing, and the responsible party — one page is enough to start.
  3. A defined set of container states, with a named authorizer for each transition.
  4. Permissions configured to that state model, including record-level restriction where parties share the environment.
  5. Superseded revisions retained, never overwritten.
  6. A pre-issue check that is a specified list, performed by someone other than the author.
  7. Asset information requirements drafted with whoever will operate the building, before design documentation begins.

Item 7 carries the highest return and is the most frequently skipped, because the operator is usually not yet under contract when the decision has to be made. That sequencing problem is procurement's to solve, not the design team's — and naming it as such is often the most useful contribution an information manager makes.

6. What this does not claim

Nothing here is an original technical contribution. Every underlying requirement exists in published standards, and this document's only work is consolidation and translation into decision form. Its intended reader is a firm that has been handed a digital delivery requirement it does not have the internal capacity to interpret, and needs to know which decisions actually matter and in what order.

Where a decision has legal consequence — allocation of liability, ownership of information, obligations surviving completion — it must be drafted by counsel licensed in the relevant jurisdiction. This document identifies the decisions. It does not draft the instruments.

References

Citation

Esmeral Jaramillo, D. (2026). Information Governance for Collaborative Delivery (Version 1.0). Built Intelligence. built-intelligence.com