quick search
GO

quick links

ADaM 4A's Principle


Prescience Methodology
In order to understand the Business Impact on Change within your Business Domain our consultants work with a proven methodology using tailored Landscape Questionnaires in order to rapidly document and assess the gaps in terms of Business Dependencies and Business Risks.

Our report identifies the potential risks present in your organization and presents a clear set of recommendations to assist you in minimizing these risks on an ongoing basis whilst ensuring full audit, ownership, documentation and change decision support.

IN THE USE CASE FOR INFRASTRUCTURE GOVERNANCE THE 4A'S PRINCIPLE WILL DELIVER?

  • A DOCUMENTED BUSINESS IT ‘UNIVERSE’
  • A DEFINED BUSINESS/IT OWNERSHIP
  • A DEFINED BUSINESS PROCESS REGISTER
  • AN IT OPERATIONAL RISK REGISTER
  • COMPLIANCE REPORTS DEFINING RISK EXPOSURE
  • EFFECTIVE MAPPING OF DR/BCP
  • COMPREHENSIVE BUSINESS RISK RATINGS
THE BENEFITS OF THE ADAM 4A'S PRINCIPLE INCLUDE
  • INDEPENDENT AUDIT OF IT OPERATIONAL RISK
  • FULL DEPENDENCY MAP FOR BUSINESS/IT LANDSCAPE
  • RECOMMENDATIONS FOR DEALING WITH IT OPERATIONAL RISK
  • POSITIVE POSITIONING WITH REGULATORY AUTHORITIES

The ADaM 4A’s Principle has the four key stages -

Assessment
  • Set Risk Assessment Criteria and Objectives
  • Document IT Systems Landscape 
  • Define Business IT Ownership
  • Create Business IT Process Register
  • Determine External and Third Party Exposure
  • Identify DR/BCP Requirements
  • Review Current Change Methodology 
Analysis
  • Document IT Component Terrain
  • Define Ownership & Control Points
  • Produce IT Dependency Matrix
  • System Topology Schematics
  • Identify Landscape Conflicts
  • Derive Business Impact Analysis
  • Determine Compliance Ratings
Awareness
  • Understanding Your Landscape and Dependencies
  • Relationship between Processes and Technology
  • The Impact of Change
  • Roles, Responsibilities, Authorization, Controls
  • Protecting Your Investment Factors
  • Best Practice, Do’s and Don’ts 
Audit
  • Set Audit Criteria and Objectives
  • Reassess IT Systems Landscape
  • Review Business IT Ownership
  • Check Business IT Process Register
  • Re-evaluate IT Operational Risk
  • Detailed Report Findings
 As IT systems become distributed, complex, inter-connected and endemic, change control becomes increasingly hard to implement, hard to manage and hard to control.


Steve Veasey
Managing Director, 3Di Systems