1 of 4

CISO TRADECRAFT

A Shared Language for Business and IT

1 / 5

Before technology can be governed, rationalized, or invested in deliberately, business and IT need a shared vocabulary for what the IT organization hosts. This model maps mission critical business capability to the IT services that support it.

WHERE THIS MODEL GETS USED

1

Application Rationalization

Eliminate redundant, overlapping, and unsupported technologies.

2

M&A Integration

Benchmark and align technology portfolios against a shared capability model.

​

​

3

Cost Allocation & Chargeback

Link every technology investment to a business capability.

​

​

4

Sourcing Strategy

Make smarter build, buy, and outsource decisions at the capability level.

​

2 of 4

CISO TRADECRAFT

Mission Critical Business Capabilities

2 / 5

Finance & Accounting -

Executive Owner: CFO

Manage financial transactions, cash flow, expenses, tax obligations, and accounting operations.

Enterprise Resource Planning

Executive Owner: COO

Manage inventory, manufacturing, quality, maintenance, and operational planning.

Human Resources

Executive Owner: Chief of HR

Manage recruiting, employee development, performance, workforce administration, and the employee lifecycle.

Marketing

Executive Owner: CMO

Manage marketing campaigns, events, social engagement, customer communications, and feedback programs.

Revenue Operations

Executive Owner: CRO

Manage sales, contracts, commerce, customer support, field service, and resource planning.

Digital Workplace

Executive Owner: CIO

Manage communication, collaboration, cloud, network, and technology infrastructure.

Mission Critical Application:

Enterprise Resource Planning (ERP) Tool

Mission Critical Application:

Core Finance & Accounting Software

Mission Critical Application:

Human Resources (HR) Software

Mission Critical Application:

Marketing Automation Software

Mission Critical Application:

Customer Relationship Management (CRM)

Mission Critical Application:

Office Suites, Cloud Service Providers, …

3 of 4

CISO TRADECRAFT

IT Service Catalog to Support Mission Requirements

3 / 5

Core Finance & Accounting Software

  • Accounts Payable
  • Accounts Receivable
  • Cash Management
  • Expense Management
  • Tax Management

Enterprise Resource Planning Tool

  • Enterprise Performance Management
  • Inventory & Order Management
  • Procurement
  • Supply Chain Management
  • Warehouse Management

​

Human Resources Software

  • Learning Management System
  • Payroll
  • Performance Management
  • Time & Attendance
  • Travel and Expenses
  • Workforce Management

Marketing Automation Software

  • Public Websites
  • Customer Surveys
  • Event Management
  • Marketing Campaigns
  • Social Media Management

Customer Relationship Management

  • Billing & Payment
  • Contracts
  • Customer Relationship Management
  • Customer Service Desk
  • eCommerce & Point of Sale

Digital Workplace Software

  • Cloud Services
  • Data Services
  • Device Management
  • Network Management
  • Office Productivity Software

4 of 4

CISO TRADECRAFT

From Capability to Technology Stack

4 / 5

1

Executive Domains

6 core domains spanning business and technology

Board / C-Suite

DONE

2

Enterprise Services

Supporting services beneath each domain

CIO / VP

DONE

3

Applications

Salesforce, SAP, Workday, ServiceNow, etc.

Enterprise Architecture

NEXT

4

Infrastructure & Platforms

Cloud, hosting, integration layer

Infrastructure Team

NEXT

5

Supporting Tech Components

APIs, data stores, security controls

Engineering

NEXT

This deck establishes Levels 1–2. Levels 3–5 extend the model into the application, infrastructure, and component layers as the program matures.