top of page

In the above example, the following was provided in the requirement: the goal of implementing an MDM solution; the affected scope included corporate and personal devices and; the outcome included management and oversight of those devices in accordance with Federal compliance requirements.

Business requirements are those mandatory needs identified by key stakeholders when establishing and meeting high-level objectives.  Requirements should convey defined goals, the scope involved, and key outcomes to measure results.  Requirements are used by departments to guide policy development, projects, and deliverables.

Outcome

Scope

Goal

The observable and/or measurable result to business performance. For our purpose, this is not project performance.

The expected coverage area or activity performed or effected by the business.  This can include activities, personnel, or departments.

The expected or desired accomplishment. Goals should identify the final or consistent state but do not identify the steps take to achieve it.

Business Requirements: Fulfilling Business Needs

HOffice Requirements Example:  Implement a device management solution that will allow the organization to configure and maintain oversight of corporate and personal devices in compliance with NIST 800-171.

Open Sign

Business

  • Defines business visions, objectives, and goals

​

  • Something that the business needs to do, have, or accomplish to stay in business

​

  • Promotes stakeholder endorsements

Working Together

Personnel

  • Should align user behavior with business expectations

​

  • Incorporate compliance standards (e.g., security awareness)

​

  • Should emphasize and detail structure and reporting

Servers

Technology

  • A functional requirement

​

  • Dictates how a system, software, or service is expected to operate in support of business requirements

​

  • Often fluid - changes with technology demands 

Office Building

Facilities

  • A functional requirement

​

  • Addresses building  standards & performance

​

  • Includes environmental factors such as physical access, accountability, safety and HVAC for personnel and equipment

bottom of page