Application Portfolio Management Software Resources

Hi Andres, Thanks for your question. EBPA (Enterprise Business Process Analysis) - is a collection of standards, frameworks, and case-studies that allow EA architects to rally & lead the wider organization into a more coherent way of doing EBPA. It includes the following items: 1. Set of EBPA visio templates (e.g., BPMN, Customer Journey, Process on Page, Capability on a Page, Value Steam and others). 2. Meta-model extensions, including new object types, new relationship types, and new attributes (e.g., APQC Identifier, Process Manual or Automated, Waste Type and others). 3. Process Reference Framework (APQC) with actual data inside the repository. 4. Set of iServer Views for structuring, analyzing, and maintaining business process information. 5. Other items like case-study, folder structures, and sample diagrams. The standard is more of a collection of various items than a concrete practice. The intention behind this extension is to provide various architecture building blocks that you can use in discussions & solution building yourself. So there is no single folder that contains all templates or a pre-defined workflow/procedure for EBPA to follow. You will find that EBPA is peppered though many folders inside the [Case Studies], [State], and [Resource Center] libraries. You can easily merge all templates into a single folder, which might work good for a demo but is not recommended for actual daily use (too many templates to govern within a single folder). A good approach is to first understand what exactly your organization is looking for in the EBPA? 1. Process Classification? This could be addressed by using APQC for establishing a process model based on your industry. 2. Process Standardization & Definition? This could be addressed by using APQC + BPMN Standard. 3. Process Improvement? This could be addressed by using BPMN + Lean Extensions. 4. EBPA from higher level view to define business needs & flows? Capability Maps, Value Stream Maps, Process/Capability on a Page type diagrams. All these items are loosely connected and getting traction in one direction will most certainly boost other areas. As for ghost relationships, I'm not sure what you mean by this. Do you have connectors that don't create relationships in the DB; you have more relationships than you have created; you have relationships that show up in repository but not on your Entity Rel Diagram; or something completely different?

Hi Laurence! While this is a common Architecture "theory" question, I wanted to jump in and answer it from the view of achieving this practically in Arodq. The above use-case can be managed and executed in Ardoq by using Group Permissions. We have an article outlining the functionality that I will paste below and I would be happy to have a call to discuss further! Or you could post the question in our In-App Chat for an even quicker response! :) Ardoq Permission Groups: https://help.ardoq.com/en/articles/3923652-permission-groups Thanks! Hana Wright

Hello Mohammed, In addition to Third Party & Supplier Risk Management, SecurityScorecard can be used for several different use cases such as reputational risk management, cyber insurance, due diligence and compliance. As an organization’s digital footprint becomes bigger and more complex, the need for IT portfolio analysis also grows. SecurityScorecard allows you to easily diagnosis, remediate, and monitor cyber risk across your IT portfolio, and segment by lines of business for a customized view of an organization’s entire digital footprint. With SecurityScorecard’s data collection and granular analytics capabilities, organizations are able to get an outside-in view of their security posture and see what a hacker sees. Risk factor information helps security teams understand where the true risk lies in their portfolio on a continuous basis and manage that risk. SecurityScorecard delivers the most accurate, transparent, and comprehensive risk rating services. Additionally the SecurityScorecard Atlas product accelerates the cybersecurity questionnaire process by leveraging the platform’s underlying signal intelligence to validate responses. Instantaneous risk ratings automatically map to vendor responses - providing you a true 360-degree view of security risk analysis. Lastly, SecurityScorecard’s threat intelligence capabilities and attribution engine deliver actionable intelligence for risk management teams to reduce vulnerabilities before attackers can exploit them. The SecurityScorecard Ratings product’s threat reconnaissance capabilities can help you answer the question that most traditional threat intelligence solutions leave unanswered, what assets are at risk and what entity do they belong to? By leveraging SecurityScorecard's platform, security teams are able to quickly identify vulnerable assets in their IT infrastructure and third-party ecosystem. Furthermore, security teams can work efficiently to proactively increase cybersecurity resilience. Please let me know if you have any other questions!