SA Business Rules are essential
Business rules are a key component to implementing situational awareness capabilities. These rules determine what to monitor, how to monitor, status tracking, control limits, and guidance for alerts and notifications.
Here are some basic components for business rule determination:
Who are the Stakeholders, these include:
- Decision Makers – the people that will determine what needs monitoring, what controls are put in place and what investments will be made, with whom and when, to implement situational awareness solutions
- Administrators – those who will have responsibility to develop and maintain groups of assets and people, roles and responsibilities, policies that trigger an event and determine associated responses
- Participants – the people that will be notified for each type of event and enabling them to deliver the appropriate response and/or take the desired action
What are the various Use Cases (e.g., what to monitor and how, what information is captured, how is information used, how is information disseminated and to whom). This includes:
Communication Requirements
- What communication capabilities exist?
- What are my incremental needs over and above what communications exist?
- What is the recommended course of action to ensure desired communications?
Risk Scenarios
- Scenarios should be prioritized based on:
- The likelihood of occurrence
- The severity of the impact of a risk event
- The detectability of a risk event
- What exists today for each risk priority and does it provide an acceptable level of mitigation response?
- What are my Incremental needs over and above what risk monitoring and management capabilities exist?
- Recommended Approach
Situational Awareness Data Architecture is critical to driving business rules. Data provides the input into the business rules engine which drives the required notifications to the right people through the right channels. In turn, data helps audit the actual outcome of the requested response and its effectiveness in addressing each use case.
Data needs are determined by:
- What are we planning to monitor and what information must be captured?
- How is that information used by our business rules engine?
- What information must be disseminated, when and where?
- What kinds of metrics do we want to maintain in order to continuously improve situational awareness capabilities?
Business rules definition and implementation are often best determined in facilitated sessions where the right questions can be asked, the proper guidance applied, and an appropriate plan developed.
Skyward consultants have significant expertise in driving these sessions. Let’s us show you how you can apply automation logic to greatly improve your situational awareness.
