====== 4.1.3 Governing Roles - Combined Requirements Model ====== [[dido:public:ra:1.4_req:00_aboutreq | Return to About Requirements]] In order to be effective, it is best to combine the Governance and the cognitive models together. The results look something like Figure {{ref>combReq}}. Each cell in the overlaid models represents a single Role or area of consistent governance providing some context for the [[dido:public:ra:xapend:xapend.a_glossary:r:requirement|requirements]]. For example, at the **Data** x **Regulation** cell, there is specific data that is required to be collected according to the regulations. There is a regulation that requires a bank to collect taxpayer IDs for each account. During the **Execution** aspect (i.e., the Bank's [[dido:public:ra:1.3_gov:1_legaldocs:3_pp | Policies and Procedures(P&P)]]) the taxpayer ID is collected, the specific bank actually collects and records the taxpayer ID. During the **Compliance** aspect, there is a requirement to verify that each Bank actually has a taxpayer id with each account. This consistency in governance can be repeated for each row (i.e., Wisdom, Understanding, Knowledge, Information and Data) and for each column (i.e., Regulation, Execution and Compliance). If any of the Roles (i.e., cells have no requirements, the governance is incongruent and can lead to a potential flaw or hole in the governance which is vulnerable to exploitation.
{{ :dido:public:ra:screen_shot_2021-03-02_at_10.00.02_am.png?600 | }} Combined Governing and Cognitive Models - Each Cell represents a Governing Role
/**=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- /* To add a discussion page to this page, comment out the line that says ~~DISCUSSION:off~~ */ ~~DISCUSSION:on|Outstanding Issues~~ ~~DISCUSSION:off~~