SECURIX Expert Service

Security Business Analysis Service

Experienced business analysts who do the groundwork for your ICT and security projects, finding out what you really need, so projects are delivered on time, on budget and to quality, with transparent reporting.

Solution overview

Security Business Analysis Service establishes what your ICT or security project needs to deliver. A SECURIX business analyst examines the current situation, works with stakeholders to understand their needs, and turns the findings into clear, prioritized and agreed requirements. These provide a basis for project planning, tender specifications and acceptance. The service focuses on public sector projects and is also available to private companies with complex ICT projects.

Your business needs

Agree on what your project needs to deliver

Unclear requirements

Projects begin without a shared understanding of the current situation or user needs. Missing requirements lead to late changes, rework and solutions that do not fit.

Incomplete tender specifications

Suppliers respond to the requirements they receive. Gaps in tender specifications can result in incomplete offers and become difficult to address after the contract is awarded.

Differing expectations

Users, business units, IT, security and procurement each hold part of the picture. Without structured analysis, their needs remain disconnected and priorities shift during delivery.

Who this is for

A shared requirements baseline for your project team

For cantons, cities, federal offices, healthcare and education organizations, and private companies with complex ICT and security projects where requirements still need to be clarified.

Project sponsors

An agreed understanding of what the project needs to deliver.

Project management / Project team

Documented, prioritized requirements to support planning, procurement and acceptance.

Business Units / Future Users

Interviews and workshops that capture their needs and bring them into the project requirements.

Our deliverables

Clear requirements from analysis to acceptance

  • Current-state analysis — Analysing existing processes, systems and problems to understand the starting position of the project.
  • Requirements documentation — Documenting clear, prioritised and agreed requirements as specifications, use cases or user stories.
  • Procurement input — Provide requirements for tender specifications, including WTO tenders, and support the evaluation of offers.
  • Risk and compliance analysis — A risk register with the five main priorities and an overview of the compliance gaps against the applicable frameworks.
  • Quarterly board reporting — Reporting in plain business language on security priorities, risks and progress.
  • Acceptance support — Define acceptance criteria and check whether the delivered solution meets the requirements.

  • Project leadership
  • Operational PMO support
  • Technical implementation
  • Licenses, hardware and third-party services
  • Procurement law advice

How we deliver

From the current situation to agreed requirements

  1. Examine existing processes, systems and problems to establish the starting point.

  2. Use interviews and workshops to capture what users, business units, IT, security and other stakeholders need.

  3. Structure and prioritize the requirements, document them in the appropriate format and agree them with the customer.

  4. Contribute requirements to tender specifications, support offer evaluation and define acceptance criteria for checking the delivered solution.

A first set of agreed requirements is typically available four to six weeks after the assignment begins. Typical lead time from award to start is one to two weeks under an existing framework agreement, or two to four weeks for a new mandate, depending on domain expertise, consultant availability and customer onboarding, including any security clearance.

Frameworks and methods

Requirements that fit your project framework

HERMES

Provide the requirements-related deliverables needed in each project phase. HERMES is SECURIX’s internal standard.

Agile

Document requirements as user stories and backlog items and refine them with the team, for example within Scrum and Kanban.

Hybrid

Combine formal requirements for HERMES governance and tenders with iterative refinement during agile delivery.

References

Business analysis in practice

Customer reference to follow

Frequently asked questions

Before your project management assignment begins

Project Management organizes and leads the project. PMO supports the operational project back office. Business Analysis establishes what the project needs to deliver and is accountable to the project manager for clear, agreed requirements.

Yes. Business analysts provide requirements for tender specifications, including WTO tenders, and support offer evaluation. Legal advice on procurement law is not included.

No. It covers ICT and security projects, including adjacent topics such as printer infrastructure, PKI or Intune rollouts.

Our business analysts work closely with your project manager and involve your business units and users through interviews and workshops. They work on site using a laptop you provide. The assignment is billed hourly for the time needed.

Contact

Let’s discuss your next step

Tell us where your project needs greater clarity. Together, we’ll establish which business analysis support you need.

Tobias Kern

Head of Security Advisory

Talk to Tobias