This tool will help you allocate ownership and responsibility for any new or existing security operations measures. Identify stakeholders that are:
- Responsible: The person(s) who does the work to accomplish the activity; they have been tasked with completing the activity or getting a decision made.
- Accountable: The person(s) who is accountable for the completion of the activity. Ideally, this is a single person and is often an executive or program sponsor.
- Consulted: The person(s) who provides information. This is usually several people, typically called subject matter experts (SMEs).
- Informed: The person(s) who is updated on progress. These are resources that are affected by the outcome of the activities and need to be kept up to date.