Stages and Steps in the Design Process
Video Activity
Join over 3 million cybersecurity professionals advancing their career
Sign up with
Required fields are marked with an *
or
Already have an account? Sign In »

Video Transcription
00:00
there are different stages and steps in the design process that need to be addressed.
00:05
So in this video we're going to talk about the forest stages and steps of designing a governance program, an overview of each step and the end result of the design process.
00:16
So there are four steps and stages in the governance system. Design workflow.
00:20
Let's go through each One
00:23
step One is to understand the enterprise, context and strategy,
00:27
meaning it's essential to first understand the enterprise, its strategy goals, its current risk profile and I t related issues.
00:36
What is the enterprises strategy?
00:38
Is it focused on being more risk averse or being more innovative? What are the goals?
00:43
Is it being more customer service oriented or remaining compliant with laws and regulations that it's subject thio?
00:49
What is the current risk profile of the company? What risks does it face?
00:54
What is its risk appetite?
00:56
What are the risks aligned with the organization's risk appetite?
01:00
It's also important to understand the current IT related issues the enterprise face
01:04
is it non compliant with laws and regulations and standards is the cost of I t excessively high,
01:11
determine and understand what these issues are.
01:17
Step two is to determine the initial scope of the governance system.
01:21
Consider what the enterprise strategy is.
01:23
What will the scope and tail
01:26
consider the enterprises goals and apply the goals? Cascade.
01:30
Do you remember how the goals cascade links enterprise goals with alignment goals?
01:34
Thus, consider what are your enterprise goals? And consider how they will link thio alignment goals
01:41
that should assist you with setting your scope for your governance system.
01:45
Additionally, consider the risk profile and the current it related issues the enterprise faces.
01:49
For example, an enterprise that wants to manage risk and is overall risk averse will include its risk profile and I t related issues that poses risk in its scope. And it may frame its entire scope around the aforementioned
02:07
Step three focuses on refining the scope of the governance system.
02:10
Consider the threat landscape
02:13
compliance requirements, role of I T sourcing model I T implementation methods, enterprise size and the I T. Adoption strategy. When refining your scope,
02:23
make sure you are being inclusive to have a meaningful impact of your I T governance program, while balancing a scope that does not lose track and site of your overall goals, and business objectives.
02:35
Having a refined scope will ensure that you are upholding the governance and management objectives that support your I t. Governance of your enterprise.
02:46
Lastly, Step four will conclude the governance system design.
02:51
In this step, you will resolve inherent priority conflicts and set the priority of your enterprise.
02:55
For example, managing security and supporting innovation may have conflicts.
03:01
Thus set the priority for your I t governance objectives.
03:06
In this step, you will conclude the governance system and design, and you'll begin to start implementation.
03:14
Okay, quick pop quiz. How many steps are there in the design process as defined by Kobe? It,
03:20
if you said for you are right.
03:23
The previous four steps will result in recommendations for prioritizing objectives, target capability levels and an adoption of specific variance of a government system component.
03:35
Recommendations for prioritizing objectives will be the result of the aforementioned steps in that it will allow an enterprise to focus on the needs that support the main drivers of a nightie governance program.
03:46
Target capability levels will also be introduced depending on what the organization requires.
03:53
For example, an organization in a highly regulated industry will need a higher capability level of compliance with laws and regulations than it's less regulated counterparts.
04:04
The adoption of specific variance of a governance component will allow for a governance system that is tailored to a specific organizations needs.
04:14
Not all organizations are the same. So for talking about a company that is highly regulated, it will adopt specific variants, such as a work culture that is risk aware and security aware.
04:26
This can result in conflicting guidance.
04:29
Let's take the previous example of an enterprise that wants to support innovation and security
04:33
guidance for what the enterprise should focus on. Maybe conflicting.
04:38
Thus, the final decision will be a case by case decision, and it will vary from enterprise to enterprise.
04:46
Ultimately, this creates a governance system that is tailored to an enterprises needs as the design factors vary as objectives and components vary between organizations.
04:58
So in this video we talked about the four steps and stages of the design process, an outline of what each step entails and the results
Up Next
Similar Content