Mapping business context data

Edit online

IBM Data Risk Manager provides visibility to information asset risks in the business context data of an organization. To get this visibility, an understanding of business processes, applications, data assets, access to critical information, and other business entities and their usage are needed.

Typically, business context data of an organization is stored in a Configuration Management Database (CMDB), for example ServiceNow. Alternatively, the data can also be acquired through questionnaires, interviews, and workshops with key client stakeholders.

Importing business context data by using CSV files

Viewing information asset risks requires an initial one-time capture and import of organizational business context data in terms of business units, lines of business (LOB), business processes, applications, and stakeholders. You can import the business context data into IBM Data Risk Manager by using one or multiple files in comma-separated values (CSV) format. The organization metadata is mapped to the IBM Data Risk Manager meta model, and then the dashboard views can be configured for the risk analysis.

When the business context mapping is complete, organization context data can be imported into the system based on completed mappings. If the mapping is updated, organization context data must be imported again to maintain data integrity.

Business context mapping consists of the following steps.
  1. Preparing business context data for import.
  2. Loading business context data for mapping.
  3. Mapping business context data.
  4. Configuring the IBM Data Risk Manager views.
  5. Storing the content and structural format on the IBM Data Risk Manager server.
If you want to import the context data again where only data in the CSV files is updated without any additional columns, run the following steps.
  1. Preparing business context data for import.
  2. Loading business context data for mapping.
  3. Storing the content and structural format on the IBM Data Risk Manager server.

Viewing and managing business context data

You can use the Manage Inventory component to easily and quickly view and manage applications and business processes that you imported through CSV files as context data and their associations with other business entities. For more information about managing the context data, see Application inventory and Business process inventory.

Importing ServiceNow CMDB into IBM Data Risk Manager

You can configure ServiceNow to import configuration management database (CMDB) data into IBM Data Risk Manager and use this data along with applications and business context.

For more information about how to import ServiceNow CMDB into IBM Data Risk Manager, see Integrating ServiceNow with IBM Data Risk Manager.