In the age of social media, cybersecurity incidents can cause not only financial loss and legal troubles, but also reputational damage. As cyberattacks get more and more frequent and more and more sophisticated, cybersecurity has become one of the most vital and challenging issues faced by governments and organisations today. In 2023 alone, there were multiple high profile data breaches in Australia, including ones involving a health insurance company, a major telco and a financial service provider.
The average cost of a data breach in 2023 was USD $4.45 million, which is a 15% increase over 3 years.
https://www.ibm.com/reports/data-breach
As the need for effective cybersecurity solutions grow, Business Analysts are also increasingly required to include cybersecurity considerations or solutions when eliciting, documenting and validating requirements.
As a Business Analyst, you may be required to:
- Identify your organisation’s exposure to cybersecurity risks.
- Elicit and prioritise the cybersecurity requirements and expectations.
- Evaluate and recommend the best cybersecurity solutions.
- Ensure the successful implementation and adoption of the cybersecurity solutions.
Some business analysis techniques you can use:
| Task | Techniques |
| Identify cybersecurity risks | Risk assessment, SWOT analysis, 5 Whys, Stakeholder Analysis, Environmental Scanning |
| Elicit and prioritise cybersecurity requirements and expectations | Interviews, Workshops, Positioning Matrix, Feasibility Matrix, Vulnerability Prioritisation, MoSCoW |
| Evaluate and recommend the best cybersecurity solutions | Pros and Cons, Idea Verification, Pairwise Comparison, Gap Analysis, Cost-Benefit Analysis |
| Ensure successful implementation and adoption | Requirements Management and Traceability, User Acceptance Testing, Change Management, Evaluation and Feedback |
By bridging the gap between the business and IT domains and ensuring that the cybersecurity solutions are in line with the needs and expectations of your organisation, as a business analyst you play a critical role in cybersecurity analysis. By doing this, you may safeguard your organisation’s assets and reputation while also assisting them in improving their cybersecurity performance and resilience.
Learn Practical Business Analysis Skills
– Browse all Business Analyst Courses. –
