riskmap presentation isf · management team order fulfilment product creation sales & marketing...
TRANSCRIPT
![Page 1: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/1.jpg)
RiskMapProcess for determining the IT risk landscape
ISACA RoundTableOctober 2012
Kay Behnke
![Page 2: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/2.jpg)
PUBLIC
Agenda
2
NXP RiskMap Next Steps
![Page 3: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/3.jpg)
PUBLIC
NXP Semiconductors
Headquarters: Eindhoven, The NetherlandsEmployee base: approximately 25,000 employees working in more than 25 countries with research and development activities in Asia, Europe and the United States, and manufacturing facilities in Asia and EuropeNet sales: $4.2 billion in 2011, over 62% of our sales are derived from the Asia Pacific region (incl. Japan)Customers: Leading OEMs worldwide
NXP Semiconductors N.V. (Nasdaq: NXPI) provides High Performance Mixed Signal and Standard Product solutions that leverage its leading RF, Analog, Power Management, Interface, Security and Digital Processing expertise.
3
![Page 4: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/4.jpg)
PUBLIC
Key macro growth drivers in electronics
Security
Energy Efficiency
Health
Connected Mobile Devices
Secure mobile transactions and secure identityAuthentication, tagging and tracking
Car and home access, security & remote diagnosticsRadar and (body) scanning installations
Efficient power conversion and low stand-by powerEnergy-saving lighting and back-lighting
Energy conservation through demand side managementElectric/lighter vehicles, intelligent traffic management
Personal healthcare and portable emergency devicesConnected hearing aids and implantable devices
Car safety & comfortElectronic diagnostics
Proliferation of mobile data usage, wireless infra build-outSmart mobile devices: always-on, multimedia, location-based
Connected car, many broadcast & connectivity standardsNew user interfaces (e.g., touch, joystick)
4
![Page 5: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/5.jpg)
PUBLIC
Strong innovation track record dating 50+ yearsFocused investment of over $550 million per year in R&D
Eindhoven (NL)
Caen (F)Hamburg (GER)
Bangalore (India)
San Diego (US)San Jose (US)
Nijmegen (NL)
R&D key figuresApproximately 3,200 employees in R&D of which over 2,600 support our High-Performance Mixed-Signal businessesEngineering design teams in 19 locations11,000 issued and pending patents
Shanghai/Suzhou
Tempe (US)Hong Kong
Leuven (B)
Singapore
Gratkorn (Austria)
5
![Page 6: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/6.jpg)
PUBLIC
World class manufacturing capabilities Differentiated process technologies and competitive manufacturing
Hamburg (GER)
Nijmegen (NL)
Front EndBack End
Manchester
Jilin
Shanghai/SuzhouKaohsiungHong Kong/Guandong
CabuyaoSingaporeSeremban
Bangkok
Site name in blue = Joint Venture
6
![Page 7: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/7.jpg)
PUBLIC
For more information about NXP: www.nxp.com
7
![Page 8: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/8.jpg)
PUBLIC
Objectives
8
Information assets within
business processes
Inventory
Information assets to IT infra / apps
Mapping
Risk profile of IT infra / apps
Risk Profiles
CIA
Classification standard
Criticality
![Page 9: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/9.jpg)
PUBLIC
RiskIT Framework (ISACA)
9
NXP RiskMap
![Page 10: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/10.jpg)
PUBLIC
Process steps (RiskMap 1.0)
10
Preparation Execution
Calibration Approval
![Page 11: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/11.jpg)
PUBLIC
Add-Ons (RiskMap 2.0)
11
Preparation Execution
Calibration Approval
Information Classification
RiskProfiles
Maintenance
![Page 12: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/12.jpg)
PUBLIC
Process step
12
Buy-in frombusiness process owners
Preparation Severity rating criteria
![Page 13: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/13.jpg)
PUBLIC
Business processes
13
Markets & C
ustomers
Businesses
Support processesHRM F&A Purchasing IT Legal Quality Sustainability Communications
Management Team
Order Fulfilment
Product Creation
Sales & Marketing
Project, Portfolio, PipeliningTechnology & IP RoadmappingProject Execution
Key Account ManagementDemand GenerationSales Realisation
Identification
Automotive
Core processes
BusinessManagement
Strategy, Budgeting & Forecasting
Sales and operations planningDemand FulfillmentEngineering & Volume Ramp-upFunctional StrategyMan Resource MngntTransfers-In and Out SourcingFactory Operations
Strategy
Standard Products
High Performance Mixed Signal
Preparation
![Page 14: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/14.jpg)
PUBLIC
NXP Processes and Main Linkages
14
Business Management – Strategy and Business Plan Review
Mergers & Acquisitions
Budgeting&
Forecasting
FactoryOperations
Transfers-Inand
OutSourcing
DemandFulfilment
SalesRealisation
HRM F&A Purchasing IT Quality Legal Sustainability Communications
Cus
tom
er S
atis
fact
ion
Cus
tom
er &
Mar
ket R
equi
rem
ents
DemandGeneration
Key Account Management
Strategy
Product Creation
Manufacturing Resource
Management
Company Strategy
Functional Strategy (e.g.
Industrial)
Engineering &Volume Ramp up
Sales and Operation plan
Business Management
Sales & Marketing
Product Creation
Order Fulfilment
Preparation
![Page 15: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/15.jpg)
PUBLIC
Expressing impact in business terms
15
EffectivenessEfficiency
ConfidentialityIntegrity
AvailabilityComplianceReliability
CobIT Information
Criteria
Preparation
StrategicOperationsReporting
Compliance
COSO ERM
FinanceOperationsCustomerEmployee
ISF
ProductivityResponse
ReplacementCompetitiveadvantage
LegalReputation
FAIR
FinancialCustomerInternalGrowth
Balanced Scorecard
(BSC)
![Page 16: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/16.jpg)
PUBLIC
Expressing impact in business terms
16
EffectivenessEfficiency
ConfidentialityIntegrity
AvailabilityComplianceReliability
CobIT Information
Criteria
Preparation
StrategicOperationsReporting
Compliance
COSO ERM
FinanceOperationsCustomerEmployee
ISF
ProductivityResponse
ReplacementCompetitiveadvantage
LegalReputation
FAIR
FinancialCustomerInternalGrowth
Balanced Scorecard
(BSC)
![Page 17: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/17.jpg)
PUBLIC
Severity rating criteria
Property of information Business impact type
Severity rating
A-Very high, B-High, C-Medium,D-Low, E-Very low
Ref. Impact AVery high
BHigh
CMedium
DLow
EVery low
Financial
F1 Loss of sales, orders or contracts Financial impact 20% + 11% to 20% 6% to 10% 1% to 5% Less than
1%
F2Loss of tangible assets (e.g. fraud, theft of money, lost interest)
Financial impact $30m+ $1m to $30m
$100K to $1m
$10K to $100K
Less than $10K
F3Penalties/legal liabilities (e.g. breach of legal, regulatory or contractual obligations)
Financial impact $30m+ $1m to $30m
$100K to $1m
$10K to $100K
Less than $10K
F4 Unforeseen costs (e.g. recovery costs) Financial impact $30m+ $1m to
$30m$100K to
$1m$10K to $100K
Less than $10K
F5 Depressed share price (e.g. sudden loss of share value) Loss of share value 25% + 11% to 25% 6% to 10% 1% to 5% Less than
1%
Preparation
17
![Page 18: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/18.jpg)
PUBLIC
Process step
18
Information Asset
selectionExecution
Information Asset rating
(C, I, A)
Information Asset
mapping
![Page 19: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/19.jpg)
PUBLIC
Rating of information assets (1)
19
Key Business process
Business process Information Type
Information is disclosed
without authorization
Information is modified without
authorization
Information is
unavailable for 1 hour
Information is
unavailable for 1 day
Sales & Marketing
Key Account Management
Customer Ranking
Sales & Marketing
Demand Generation
Customer Opportunity / Requirements
Sales & Marketing
Demand Generation
Pricing & Quoting
Sales & Marketing
Demand Generation
Customer Forecast
Sales & Marketing
Sales Realization
Customer Contracts
Sales & Marketing
Sales Realization
Design Win
Execution
![Page 20: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/20.jpg)
PUBLIC
Rating of information assets (2)
20
Key Business process
Business process Information Type
Information is disclosed
without authorization
Information is modified without
authorization
Information is
unavailable for 1 hour
Information is
unavailable for 1 day
Sales & Marketing
Key Account Management
Customer Ranking Medium Low Low Low
Sales & Marketing
Demand Generation
Customer Opportunity / Requirements High Medium Low Low
Sales & Marketing
Demand Generation
Pricing & Quoting Very High Very High Low High
Sales & Marketing
Demand Generation
Customer Forecast High High Low Low
Sales & Marketing
Sales Realization
Customer Contracts High High Low Low
Sales & Marketing
Sales Realization
Design Win High Low Low Low
Execution
![Page 21: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/21.jpg)
PUBLIC
Mapping of information assets to applications (1)
21
Key Business process
Business process Information Type Appl A
(CLASS)Appl B
(i2)Appl C(B2B)
Appl D(CRM)
Sales & Marketing
Key Account Management
Customer Ranking X X
Sales & Marketing
Demand Generation
Customer Opportunity / Requirements X
Sales & Marketing
Demand Generation
Pricing & Quoting X X
Sales & Marketing
Demand Generation
Customer Forecast X X
Sales & Marketing
Sales Realization
Customer Contracts X
Sales & Marketing
Sales Realization
Design Win X X
Execution
![Page 22: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/22.jpg)
PUBLIC
Mapping of information assets to applications (2)
22
Key Business process
Business process Information Type Appl A
(CLASS)Appl B
(i2)Appl C(B2B)
Appl D(CRM)
Sales & Marketing
Key Account Management
Customer Ranking M L L L M L L L
Sales & Marketing
Demand Generation
Customer Opportunity / Requirements H M L L
Sales & Marketing
Demand Generation
Pricing & Quoting VHVH L H VHVH L H
Sales & Marketing
Demand Generation
Customer Forecast H H L L H H L L
Sales & Marketing
Sales Realization
Customer Contracts H H L L
Sales & Marketing
Sales Realization
Design Win H L L L H L L L
Execution
![Page 23: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/23.jpg)
PUBLIC
Mapping of information assets to applications (3)
23
Key Business process
Business process Information Type
Appl A(CLASS)
Appl B(i2)
Appl C(B2B)
Appl D(CRM)
VHVH L H H H L L VHVH L H H H L L
Sales & Marketing
Key Account Management
Customer Ranking M L L L M L L L
Sales & Marketing
Demand Generation
Customer Opportunity / Requirements H M L L
Sales & Marketing
Demand Generation
Pricing & Quoting VHVH L H VHVH L H
Sales & Marketing
Demand Generation
Customer Forecast H H L L H H L L
Sales & Marketing
Sales Realization
Customer Contracts H H L L
Sales & Marketing
Sales Realization
Design Win H L L L H L L L
Execution
![Page 24: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/24.jpg)
PUBLIC
Process step
24
Information Asset
calibrationCalibration
Application criticality
verification
![Page 25: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/25.jpg)
PUBLIC
Mapping of information assets to applications – after calibration
25
Key Business process
Business process Information Type
Appl A(CLASS)
Appl B(i2)
Appl C(B2B)
Appl D(CRM)
VHVH L H H H L L VHVH L H H H L L
Sales & Marketing
Key Account Management
Customer Ranking M L L L M L L L
Sales & Marketing
Demand Generation
Customer Opportunity / Requirements H M L L
Sales & Marketing
Demand Generation
Pricing & Quoting VHVH L H VHVH L H
Sales & Marketing
Demand Generation
Customer Forecast H H L L H H L L
Sales & Marketing
Sales Realization
Customer Contracts H H L L
Sales & Marketing
Sales Realization
Design Win H L L L H L L L
Calibration
![Page 26: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/26.jpg)
PUBLIC
Mapping of information assets to applications – after calibration
26
Key Business process
Business process Information Type
Appl A(CLASS)
Appl B(i2)
Appl C(B2B)
Appl D(CRM)
VHVH L H H H L L VH M L H H H L L
Sales & Marketing
Key Account Management
Customer Ranking M L L L M L L L
Sales & Marketing
Demand Generation
Customer Opportunity / Requirements H M L L
Sales & Marketing
Demand Generation
Pricing & Quoting VHVH L H VHVH L H
Sales & Marketing
Demand Generation
Customer Forecast H H L L H H L L
Sales & Marketing
Sales Realization
Customer Contracts H H L L
Sales & Marketing
Sales Realization
Design Win H L L L H L L L
Calibration
![Page 27: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/27.jpg)
PUBLIC
Process step
27
CIOApprovalBusiness Process Owners
![Page 28: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/28.jpg)
PUBLIC
Status
28
Approval
7 business domains
14 business processes
51 business applications
56 information assets
![Page 29: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/29.jpg)
PUBLIC
Usage
29
Approval
Project / Audit priorities Risk disclosure Security
baselineMonitoring &
Control
![Page 30: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/30.jpg)
PUBLIC
Add-On
30
Information Classification
Standard
InformationClassification
Information Asset
Inventory
![Page 31: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/31.jpg)
PUBLIC
Classification categories
31
Classification
![Page 32: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/32.jpg)
PUBLIC
Classification example
32
Classification
![Page 33: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/33.jpg)
PUBLIC
Rating of information assets (1)
33
Key Business process
Business process Information Type Public Internal Confiden-
tial Secret
Sales & Marketing
Key Account Management
Customer Ranking
Sales & Marketing
Demand Generation
Customer Opportunity / Requirements
Sales & Marketing
Demand Generation
Pricing & Quoting
Sales & Marketing
Demand Generation
Customer Forecast
Sales & Marketing
Sales Realization
Customer Contracts
Sales & Marketing
Sales Realization
Design Win
Classification
![Page 34: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/34.jpg)
PUBLIC
Rating of information assets (2)
34
Key Business process
Business process Information Type Public Internal Confiden-
tial Secret
Sales & Marketing
Key Account Management
Customer Ranking X
Sales & Marketing
Demand Generation
Customer Opportunity / Requirements X
Sales & Marketing
Demand Generation
Pricing & Quoting X
Sales & Marketing
Demand Generation
Customer Forecast X
Sales & Marketing
Sales Realization
Customer Contracts X
Sales & Marketing
Sales Realization
Design Win X
Classification
![Page 35: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/35.jpg)
PUBLIC
Mapping of information assets to applications (1)
35
Key Business process
Business process Information Type Appl A
(CLASS)Appl B
(i2)Appl C(B2B)
Appl D(CRM)
Sales & Marketing
Key Account Management
Customer Ranking X X
Sales & Marketing
Demand Generation
Customer Opportunity / Requirements X
Sales & Marketing
Demand Generation
Pricing & Quoting X X
Sales & Marketing
Demand Generation
Customer Forecast X X
Sales & Marketing
Sales Realization
Customer Contracts X
Sales & Marketing
Sales Realization
Design Win X X
Classification
![Page 36: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/36.jpg)
PUBLIC
Mapping of information assets to applications (2)
36
Key Business process
Business process Information Type Appl A
(CLASS)Appl B
(i2)Appl C(B2B)
Appl D(CRM)
Sales & Marketing
Key Account Management
Customer Ranking Confiden-tial
Confiden-tial
Sales & Marketing
Demand Generation
Customer Opportunity / Requirements Internal
Sales & Marketing
Demand Generation
Pricing & Quoting Confiden-tial
Confiden-tial
Sales & Marketing
Demand Generation
Customer Forecast Secret Secret
Sales & Marketing
Sales Realization
Customer Contracts Confiden-tial
Sales & Marketing
Sales Realization
Design Win Confiden-tial
Confiden-tial
Classification
![Page 37: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/37.jpg)
PUBLIC
Mapping of information assets to applications (3)
37
Key Business process
Business process Information Type
Appl A(CLASS)
Appl B(i2)
Appl C(B2B)
Appl D(CRM)
Confiden-tial Secret Secret Confiden-
tial
Sales & Marketing
Key Account Management
Customer Ranking Confiden-tial
Confiden-tial
Sales & Marketing
Demand Generation
Customer Opportunity / Requirements Internal
Sales & Marketing
Demand Generation
Pricing & Quoting Confiden-tial
Confiden-tial
Sales & Marketing
Demand Generation
Customer Forecast Secret Secret
Sales & Marketing
Sales Realization
Customer Contracts Confiden-tial
Sales & Marketing
Sales Realization
Design Win Confiden-tial
Confiden-tial
Classification
![Page 38: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/38.jpg)
PUBLIC
Add-On
38
Security Controls
RiskProfiles
GapAnalysis
![Page 39: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/39.jpg)
PUBLIC
Gap analysis
39
Risk profiles
Application A
VH VH L H
Confidential
Required Security Controls
Implemented Security Controls
RiskProfile
Application A
![Page 40: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/40.jpg)
PUBLIC
Where can I store my data?
40
Application Public Internal Confidential Secret
CollabnetEnoviaDesignSyncOffice365 *File SharesWikiEmail *
* No technical IP or Personal Employee information
Risk profiles
![Page 41: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/41.jpg)
PUBLIC
Add-On
41
Change ManagementMaintenance Review
cycle
![Page 42: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/42.jpg)
PUBLIC
Review cycle
42
Updated RiskMap
Risk assessment
Maintenance
Update Policy
Yearly Review
Approval
![Page 43: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/43.jpg)
PUBLIC
Lessons learned
Management buy-in
Business impact reference
Uniformity (assets / rating)
Moderation of workshops
Start small, grow steady
Calibration
Approval
Maintenance
43
Preparation Execution
Calibration Approval
![Page 44: RiskMap Presentation ISF · Management Team Order Fulfilment Product Creation Sales & Marketing Project, Portfolio, Pipelining Technology & IP Roadmapping Project Execution Key Account](https://reader033.vdocuments.net/reader033/viewer/2022050218/5f640674fbed944a260da019/html5/thumbnails/44.jpg)
PUBLIC 44