Domain topography

• Perceiving the domain’s segments, interactions and potential change areas.

• Understanding the current trends, challenges, opportunities and areas for improvement in the domain.

• Identifying key entities, players and roles, including competitors their strengths and weaknesses.

• Observing the competitive landscape and market positioning, as well as customers – their demographics, preferences, and behaviour.

• Being informed about regulatory changes, up-to-date standards and industrial good practices.

Compliance conditions

Conditions which ensure that business processes adhere to legal, regulatory, and standards (international, industry, internal etc.). Building a culture that prioritizes compliance involves leadership and consistent communication, which is part of domain expertise. This aspect of domain knowledge relates to legal issues, trust and reputation.

Stakeholder Insights

Understanding stakholders’ (from lawmakers and citizens to system users) needs, expectations, and feedback.

Awareness of customer satisfaction – through communication, surveys, reviews etc.

Identifying key stakeholders for the domain and understanding nature of their role vs. own organization.

Capabilities of the Organisation

Evaluating own organization's strengths and weaknesses in the particular domain, including the skills and expertise of the team, as well as any gaps in resources or capabilities.

Right skills ^UK2016

In the context of a challenging national picture it has been difficult for government to attract people with the right skills . The government established a security profession in 2013, and has undertaken some initial work to establish professional learning and development. Demand for skills and learning across government is growing and is likely to continue to grow. Plans to cluster security teams may initially share scarce skills but will not solve the long-term challenge, and will pose questions for departmental accountability.
Protecting information across government NAO - UK 2016

Technology

Staying informed about technological advancements relevant to the domain.

Assessing the impact of technology on the key operations and products/services.

Having deep knowledge of business processes and their mechanics that can be effectively supported by technology.

Identifying opportunities for technological innovation and efficiency gains.

Cyber resilience ^US2024

focus on government-wide implementation of technologies generally considered to be emerging technologies, as part of improving overall federal cyber resilience . For example, the order directs agencies to use zero trust architecture practices to facilitate more secure use of cloud technologies. The order requires implementation of pilot programs to inform the public on the security capabilities of Internet of Things devices and software development practices. It also requires the adoption of endpoint detection and response approaches to detect, hunt, and respond to cyber incidents
CYBERSECURITY: Implementation of Executive Order Requirements Is Essential to Address Key Actions GAO - USA 2024

Guidance

Guidance plays a key role in transferring domain-specific knowledge to employees, ensuring they are equipped with the necessary skills and understanding to perform their roles effectively.

Ensures Consistency : Guidance helps in maintaining consistency across processes, which is crucial for quality and efficiency.

Facilitates Training : It serves as a foundation for training programs, ensuring that all employees have a clear understanding of processes and standards.

Promotes Best Practices : By incorporating best practices, guidance ensures that organizations leverage the most effective methods and techniques available.

Supports Compliance : Detailed guidance on regulatory requirements helps organizations avoid legal pitfalls and maintain compliance.

Drives Improvement : Guidance on continuous improvement methodologies fosters a culture of constant enhancement and innovation.