Information Technology Reference
In-Depth Information
−
Constituents
Benefits of taxpayer investment in IA in government
Personalities and relationships
Interactions, dependencies, expectation management
n
n
−
he IA
2
architect cannot ignore ethics, personal psychology, group dynam-
ics, politics, and professional development when constructing the people view.
Each of these areas is a complex discipline that requires much effort and study
to master, and each is widely addressed in the current business, technology, and
IA literature.
Chapter 12 presents an Enterprise Context Framework (ECF). The ECF is a
hierarchy of enterprise constituents, that is, a hierarchy of elements that make up
the enterprise. One constituent element of the enterprise is collectives, or groups
of people. Collectives consist of individual people that act alone or in groups. The
IA
2
F people view provides an IA perspective of people and collections of peo-
ple by looking at the risks inherent with individuals, groups, group relationships,
group actions, and group motivations. People within the organization possess cer-
tain trust levels, typically more trust than those outside the organization. The IA
2
people view assists in characterizing external threats, internal threats, and how to
address those threats.
2.5.2
Policy
Policies specify appropriate and desired behavior. Employees use policies to guide
decisions that affect the organization. The IA
2
F policy architectural view looks at
risks within business policies and produces policies to guide IA activities and deci-
sions across the enterprise. Examples of IA policies include continuity of operation
plan (COOP), business continuity, disaster recovery, privacy policies, and technical
policies, including firewall policy, access control, and incident response.
2.5.3
Business Process
One constituent element is the business process. The IA
2
F business process view
provides an IA perspective of business processes. The IA
2
F business process view
looks at risks within a business process, workflow, and services to assist the IA
architect in addressing those risks.
A business process is an activity that consists of one or more workflows. A
workflow consists of one or more procedures. The successful completion of a
workflow fulfills a business service. A human may provide a service, or technol-
ogy may provide a service. For example, a business function may be account-
ing. Accounting consists of business processes that include accounts receivable,
employee expense reimbursement, and statements and ledgers. Accounts receiv-
