Investigative Case Management


Posted by Admin

Investigative Case Management

Investigative Case Management

In every case, the risk to the organization must be reduced to an acceptable level. Here are some of the potential risks:

  • Failure of the security solution to accomplish objectives
  • Presence of residual security risks not addressed by the proposed solution

Risks need to be properly identified, evaluated and addressed. The impact of these risks can be minimized by proper project management and control of the implementation process. It is important to note that risks are events, not issues, and the probability of occurrence and estimated business impact, should be calculated and documented.

Business Case Recommendations

For security solution implementations, business case recommendations must be presented to describe the justification for the recommendations, clearly put forth to enable readers at all levels of the organization to quickly understand the extent of the investment the nature of the product, service or resources which will provide the solution.

As for any business case presentation, an executive summary should be provided to summarize the details to be found in the presentation. Executives authorized with approving the recommendations will need to have this summary presented in a format which will enable them to understand the concepts sufficiently to warrant approval.

In presenting the business case, it is important to state as many positive factors that support the recommendations, in particular, setting out why a particular option is the best. For example, it may deliver the best ROI, it is the most effective solution, or it is the only option that can meet current business needs or regulatory compliance requirements.

Senior executives will be most interested in the option which offers the lowest cost, so other key factors, compliance, operational risk, and business enhancements, need to be emphasized. A major consideration in making a final decision is the support provided to other departments in the organization.