Smart IT process design

Processes with the controls built in, so change does not wait for sign-off

We model your IT processes with the controls built in, so security follows from how the work gets done.

Plan a first call

Your situation

Where most teams start from

Controls added after the fact turn into extra steps that people skip. A process with the controls inside needs no separate reminder.

Take joiner, mover and leaver. It drives account creation, access rights and decommissioning. When the process is right, access follows the role, and the evidence is a by-product.

Deliverables

What you get

  • Process models

    Your key IT processes drawn as they should run, with the control points marked.

  • Controls inside the process

    Each control placed where the work happens, with an owner and a source of evidence.

  • A first set of processes

    We start with the processes that carry the most risk and the most repeat work, such as joiner, mover and leaver.

How we work

Who does what, step by step

A Secamo advisor works with the process owners in IT, HR and the business, because most of these processes cross departments.

  1. Step 1, Together

    Pick

    We choose the processes with the most risk and the most repeat work, such as joiner, mover and leaver.

  2. Step 2, Secamo

    Model

    We draw each process as it should run and mark the control points.

  3. Step 3, You

    Check

    Process owners in IT, HR and the business test the model against daily practice.

  4. Step 4, Together

    Release

    The model goes to Build for implementation in your tools.

Questions

Common questions

What is a joiner, mover and leaver process?

It is the process that creates, changes and removes a person’s accounts and access rights as they join, change roles or leave. It touches HR, IT and the business.

Why build controls into the process?

A control that is part of the process happens every time and leaves a record. A separate checklist depends on someone remembering it.

Do we need new tools?

Not necessarily. The design describes the process first. Build then implements it in the tools you already use wherever possible.

Related

Services that work well with this one

Next step

Tell us where you stand.

A first conversation shows what a step in Smart IT process design would look like for your team.

  1. 01Tell us what you are planning. A few lines are enough.
  2. 02We call you back to talk it through.
  3. 03You get a first view of where to start and what it takes.
Plan a first call

No preparation needed. Bring what you have.