We should mean almost, digitally. With serious considerations to best practices, widely acceptable principles including that of, directly and indirectly related, applicable laws and, if any, for the sake of thoughtful and sensible transparency. Almost everything, in this case is about, as nations and industries are already taking it as an initiative to protect entities such as people, enterprises, assets, properties including but not limited to information, which is the sole subject of information security specialists but it's reality is more complicated than arguing on which security can cover which area. Technology practitioners should appreciate it. Those who goes beyond a few specializations could realized it and make an effective position paramount to a cybersecurity responsibility. And the size of that responsibility may mean breaking and delegating it with various roles, with those who are effective and prudent in their jobs.
The acquirement part is of great sense. It involve not a only a single process. It can have varying activities from before, during and after the delivery of the acquired material or solution. The processes may include sub processes and it gets down to having the pre-acquisition and post-acquisition. Underneath the sub processes may go through different stages which starts with careful planning, designing, et al.
If you go to your finance and ask for some money, more often than not, you are asked, for what purpose it is going to be used about. It is typical. Come budget forecasting season, allocation of ICT stuff depending on their lifecycle, where there are some that needs to be replaced and upgraded, everything that is perceived to be necessary and important to operate a peaceable ICT environment must be diligently allocated a reasonable amount.
Investing in ICT by all means is (can be more or less) about acquisition. One thing, the pre-acquisition part would ask by the investor what it is that certain investment tries to achieve. Something that would create or add value to the existing business system would approximately get approved. The acquisition of ICT, if done judiciously, would make the organization's stakeholder maybe happier than ever, meaning the objective has been met and something useful has been developed to address certain barrier or problem. Otherwise, sad, creating the notion that ICT only add up on waste and liabilities, which could result the organization started to become hesitant in pursuing future opportunities with ICT.
The post-acquisition part entails the application and monitoring of such ICT effort or business system. With the resources properly and continuously being assigned, the stakeholders would know whether the system is performing well as to its intended purpose. The establishment of how to measure its effectiveness would not only tell the stakeholders how successful the acquisition was but may also led to other initiatives that realizes the importance of integrating ICT into the business system. For the small and non-IT organizations depending on the nature of their business, ICT can be acquired to address high value activities.
On the other side of acquisition, it also involve the following few:
-Human capital and staffing;
-Training and development; and
-Others.
Comments