top of page

Business Requirements: Fulfilling Business Needs

Business requirements are those mandatory needs identified by key stakeholders when establishing and meeting high-level objectives.  Requirements should convey defined goals, the scope involved, and key outcomes to measure results.  Requirements are used by departments to guide policy development, projects, and deliverables.

Goal

The expected or desired accomplishment. Goals should identify the final or consistent state but do not identify the steps take to achieve it.

Scope

The expected coverage area or activity performed or effected by the business.  This can include activities, personnel, or departments.

Outcome

The observable and/or measurable result to business performance. For our purpose, this is not project performance.

HOffice Requirements Example:  Implement a device management solution that will allow the organization to configure and maintain oversight of corporate and personal devices in compliance with NIST 800-171.

In the above example, the following was provided in the requirement: the goal of implementing an MDM solution; the affected scope included corporate and personal devices and; the outcome included management and oversight of those devices in accordance with Federal compliance requirements.

Open Sign

Business

  • Defines business visions, objectives, and goals

​

  • Something that the business needs to do, have, or accomplish to stay in business

​

  • Promotes stakeholder endorsements

Working Together

Personnel

  • Should align user behavior with business expectations

​

  • Incorporate compliance standards (e.g., security awareness)

​

  • Should emphasize and detail structure and reporting

Servers

Technology

  • A functional requirement

​

  • Dictates how a system, software, or service is expected to operate in support of business requirements

​

  • Often fluid - changes with technology demands 

Office Building

Facilities

  • A functional requirement

​

  • Addresses building  standards & performance

​

  • Includes environmental factors such as physical access, accountability, safety and HVAC for personnel and equipment

bottom of page