HOffice ProServ
Merging cybersecurity best practices with today's flexible home office staff
In the above example, the following was provided in the requirement: the goal of implementing an MDM solution; the affected scope included corporate and personal devices and; the outcome included management and oversight of those devices in accordance with Federal compliance requirements.
Business requirements are those mandatory needs identified by key stakeholders when establishing and meeting high-level objectives. Requirements should convey defined goals, the scope involved, and key outcomes to measure results. Requirements are used by departments to guide policy development, projects, and deliverables.
Outcome
Scope
Goal
The observable and/or measurable result to business performance. For our purpose, this is not project performance.
The expected coverage area or activity performed or effected by the business. This can include activities, personnel, or departments.
The expected or desired accomplishment. Goals should identify the final or consistent state but do not identify the steps take to achieve it.
Business Requirements: Fulfilling Business Needs
HOffice Requirements Example: Implement a device management solution that will allow the organization to configure and maintain oversight of corporate and personal devices in compliance with NIST 800-171.
Business
-
Defines business visions, objectives, and goals
​
-
Something that the business needs to do, have, or accomplish to stay in business
​
-
Promotes stakeholder endorsements
Personnel
-
Should align user behavior with business expectations
​
-
Incorporate compliance standards (e.g., security awareness)
​
-
Should emphasize and detail structure and reporting
Technology
-
A functional requirement
​
-
Dictates how a system, software, or service is expected to operate in support of business requirements
​
-
Often fluid - changes with technology demands
Facilities
-
A functional requirement
​
-
Addresses building standards & performance
​
-
Includes environmental factors such as physical access, accountability, safety and HVAC for personnel and equipment