This objective, and the other similar ‘include‘ objectives, simply state what has to be in your Product Inventory for the Product Delivery Organisation. You may want to include more, but you cannot be missing any of these and still run a secure Product Delivery Organisation.
- Group or Individual
- Product Team
- Artefact
- Product Inventory
- Concepts
- Product Data Catalog
- Document
- Product Data Catalog
- Risk Type
- Viability
- Event
- An investigation into negligence
- Caused By
- Product Teams not handling data in a way that meets internal and external compliance requirements
- Leading To
- A substantial fine and/or sanction from an external regulatory body
-
O-OM-A-2-1
Operations > Operational Management > Data Protection
- Do you maintain a data catalog, including types, sensitivity levels, and processing and storage locations?