Organization & Relationships Model

<h2>Organization & Relationships Model (pg. 211-212)</h2>

<p>Some of the aspects of Business Organization and Relationships that you will need to examine in order to derive your business drivers and business requirements for security include:</p>

<ul>

<li>Management hierarchies and their effect on authorization, governance and control</li>

<li>Integrating the supply chain – trusted interactions between suppliers and customers, the trust model that represents them and the risk model associated with these relationships</li>

<li>Outsourcing IT operations to a third-party service provider – managing security policy making and its implementation, and the risk model that accompanies an outsourcing strategy</li>

<li>Strategic partnerships – how close you get, how much information you share, the liabilities implied by such a partnership and other aspects of the Business Risk Model</li>

<li>Joint ventures – how much information is shared and how much is segregated (JVs pose difficult problems where you collaborate on some fronts but compete on others. The development of a security domain model is essential to address these issues.)</li>

<li>Mergers, acquisitions and divestment – whether the security architecture easily support changes in the overall structure of the enterprise (Once again the use of a security domain model makes these requirements much easier to address than if the security architecture is monolithic.).</li>

</ul>