preview

Project Solution : Design Solution

Good Essays

Step 3
Design solution
At this point, the organization knows the scope and components of its Risk Management program, its current status, and the priority and quantification of each area of IT risk.
The next step is to design a set of remediation solutions, across the classic elements of people, process, and technology, each with requirements, specifications, goals, and functions. For some organizations this will be a narrowly focused activity to address the most imminent areas of risk; for others a longer term program with sequenced waves of initiatives.
This phase also includes detailed costing analysis to keep costs and benefits of proposed initiatives aligned to organizational goals. For example, a model might be designed to provide tiered levels of service based on the priorities for different types of data and portions of the business.
Solutions that reduce risk frequently also reduce complexity and cost. This is especially true when risks have been introduced by dense or poorly followed processes, misaligned organizational models, or unclear requirements or policies.

Step 4
Align IT and business value; implement solution
Although quantification is the most difficult step, most programs’ success lies in the effectiveness of implementation. Implementation determines whether risk mitigation initiatives are deployed successfully across people, process, and technology with close involvement of organizational stakeholders, or devolve into local IT projects measured

Get Access