Expertise
Cybersecurity, Governance & Resilience
Scope identity, permissions, information classification, application security, auditability and recovery around the risks of the operating environment.
Scope areas
- Identity and role permissions
- Information classification
- Application security
- Auditability and traceable actions
- Backup and recovery
Permissions carried through the system
Apply organizational scope, role permissions and data classification to the interface, APIs, exports and AI. Sensitive information must not become visible through a summary or derived answer when the user cannot access the underlying data.
Understand. Design. Build. Integrate. Operate.
Define the business need and acceptance criteria first. Design the process and controls, configure or develop the solution, validate integrations, train users and support the agreed operating environment.
- 1Understand
- 2Design
- 3Build
- 4Integrate
- 5Operate