Chief Information Officer at The Henry M. Jackson Foundation for the Advancement of Military Medicine

Rizwan Jan, Chief Information Officer at The Henry M. Jackson Foundation for the Advancement of Military Medicine

Pressure has been building among security and IT teams to manage rapid changes exacerbated by the pandemic. With the prominent rise of attack vectors and the increase in demand for talent, we realized that the way we operate has changed. This rapid change defined our new normal: a mobile workforce is no longer optional; and IT and Security must be embedded within business operations.

To succeed, organizations must evolve existing strategies and tactics, critical adjustments that include leveraging automation and DevSecOps. So how do we start integrating IT and Security into business processes? First and foremost, start by identifying and prioritizing strategic improvement and high-value transformational opportunities. Ask yourself (and your team): do the priorities align with the enterprise-wide strategic plan? I recommend tying Secure Business Process Redesign opportunities to the overall strategic objectives. Tying the SBPR to strategic objectives aligns IT with the needs of the business, supporting the core strategy of the organization. Once the SBPR initiatives are selected, IT and Security must work together to identify and evaluate any security vulnerabilities in the redesigned process. Use a risk-based analysis to minimize any potential risks to your organization. Include business stakeholders into these conversations early on as collaboration cultivates trust and transparency. Creating value is a key factor to success.

Build a communication plan and share the design, development, security controls and deployment strategies that accelerate the winning differentiators associated with the SBPR initiatives. Consistent communication will ensure you maintain and build trust across the organization. Work closely with C-level executives to support these initiatives, including budget approval.

"Consistent Communication Will Ensure You Maintain And Build Trust Across The Organization. Work Closely With C-Level Executives To Support These Initiatives, Including Budget Approval"

SBPR initiatives will allow you to identify the key activities (high value processes) you want to focus on. In the process, this focus will reveal wasted efforts to increase efficiency across the entire organization. Make sure you are measuring the success and sharing the results after implementing SBPR – especially, the winning differentiators. Sustainable on-going improvements utilizing Secure Business Process Redesign allows IT and Security to focus on transformative business priorities.