Track client data promises through solution changes

Tie data location, retention, access and use commitments to the signed agreement and proposed hosting or subcontract changes. Security and legal can assess the customer approval or remediation needed before architecture moves.

A proposed change affects an approved product, process, contract or operating plan.

People in the process

LLegal & Information SecurityProcess Owner
EEngineeringParticipating Team
DDeliveryParticipating Team
CClient SecurityParticipating Team

Records it works with

Change request and current approved baseline
Affected agreements, policies and operating records
Technical, commercial and regulatory assessments

The process is a starting point.The standards are yours.

Configure for the engagement, client requirements, data involved and applicable export-reporting scope. Contract, security and employment decisions use your approved review process.

Keep the work connected.

Legal & Information Security

Review service terms against delivery reality

Examine the SOW, service levels, acceptance, IP, data use, subcontract rights and liability terms against the proposed delivery model. Counsel can mark risk positions and questions for the negotiation team before signature.

Legal & Information Security

Turn security questionnaires into owned commitments

Compare client questions with current policy evidence, architecture and proposed contract language. Security owners can qualify answers and resolve exceptions so sales does not promise controls the delivery organisation cannot demonstrate.

SSD

Legal & Information Security

Resolve deliverable IP and reuse before handover

Compare the SOW ownership and licence terms with third-party components, reusable tools and proposed deliverable inventory. Legal and engineering can clear exceptions or obtain the needed permission before releasing code or materials to the client.

EDC

Explore all IT & services processes.

Order for the work. Room for the people.