Business requirements

From Sysadmin

Modern businesses make decisions on the basis of formal business requirements. In essence the computers serve the organisation and their deployment must be consistent with the needs of that organisation. Unfortunately business requirements are often too narrowly defined.

It is important to remember that avoiding outages, protecting company resources (computer systems and data), and preventing the escape of confidential information are themselves implicit business requirements. Any decision made by the company should be evaluated for whether it will have a signicant impact on the security of the organisation. This can then be weighed up against other business requirements.