Set of elements under a single policy authorityand complies with a higher authority

A domain that contains one or more compliantsubdomains

Domains that share a common superdomainpolicy

Logical classification/department/line ofbusiness

Convert the enterprise policy to a moregranular one that can be understood locally

Can have multiple physical domain

Set of physical elements

Can have multiple logical domains

Serve the needs of the logical domain

Enforces its own selfcontained policy

Boundary must be explicit

Trust is constant in the domain

Has no interdomain associations

Enforces its own selfcontained policy

Boundary must be explicit

Trust is constant in the domain

Trust between domains is not constant

Has gateway for interdomain associations

Physical access control contains many cells thathave their own parameters

Contains many cells that have their ownparameter

Each cell has independent access policy

Combines independent/isolated domain withhoneycomb domain

Strengthin depth provision

Resolves variable trust and binary gatewayissues

Common in classified systems requiringclearance

Layered model of domains

New policy at each boundry

Simple

Complex

Reputable

Accurate

Integrity

Authentication

Accessible

Accurate

Reliable

Admissible

Compliant

Regulated

Accurate representation of conceptual attributeat each layer

Metaprocess

Strategic view of process

Information flows and transformations

Data flows and system interaction

Protocols and step sequences

No changes in short term

Changes in short term

Services in the same domain

Subtypes

Services that are explicitly requested from onedomain to another

Processing layer

Information transfer layer

Data Management Subsystem

Middleware

Develop business strategy

Set goals, objectives and expectations

Set performance targets, risk appetite

Set policy to meet objectives and targets

Design process

Design systems

Design staffing model

Design controls and enablers

Establish process

Implement systems

Appoint and train people

Establish controls and enablers

Manage processes and operations

Manage people and systems

Monitor KRIs and KPIs

Responsible

Accountable

Consulted

Informed

Ex: Ownership, Assurance, Delegations

asset

liability

impact

Sets goals, risk appetite and performancetargets

Accountable for performance of assets in thedomain

Also called steward

Responsible for performance of assets in thedomain

Can set policy on behalf of domain authority orowner

Policy authority not delegated

Responsible for performance of assets in thedomain

Complies with policies already set

To check and report on policy compliance andrisk appetite

Reports to the owner of the domain

Appointed by thesuperdomain

Responsible for auditing performance of assetsin a subdomain

Reports to the owner of the superdomain

One who is trusted

Ex: customer

One who is relying on the trust

Ex: vendor

Unidirectional trust relationship

One party trusts the other

Bidirectional trust relationship

Both parties trust each other

Also known as passthrough trust

Uses a trusted third party

Third party performs the registration

Can be oneway or twoway

Mutual authentication

Longterm goals and plans

Have no end

Mediumterm goals and plans

Address an immediate problems

Daytoday goals and plans

Based on business processes containingrepetitive procedures