risk mitigation Articles - Enterprise Knowledge http://enterprise-knowledge.com/tag/risk-mitigation/ Tue, 12 Aug 2025 18:14:04 +0000 en-US hourly 1 https://wordpress.org/?v=6.8.2 https://enterprise-knowledge.com/wp-content/uploads/2022/04/EK_Icon_512x512.svg risk mitigation Articles - Enterprise Knowledge http://enterprise-knowledge.com/tag/risk-mitigation/ 32 32 Entitlements Within a Semantic Layer Framework: Benefits of Determining User Roles Within a Data Governance Framework https://enterprise-knowledge.com/entitlements-within-a-semantic-layer-framework/ Tue, 25 Mar 2025 14:16:22 +0000 https://enterprise-knowledge.com/?p=23518 The importance of data governance grows as the number of users with permission to access, create, or edit content and data within organizational ecosystems faces cumulative upkeep. An organization may have a plan for data governance and may have software … Continue reading

The post Entitlements Within a Semantic Layer Framework: Benefits of Determining User Roles Within a Data Governance Framework appeared first on Enterprise Knowledge.

]]>
The importance of data governance grows as the number of users with permission to access, create, or edit content and data within organizational ecosystems faces cumulative upkeep. An organization may have a plan for data governance and may have software to help them do it, but as users cycle by 10s to 1000s per month, it becomes unwieldy for an administrator to manage permissions, define the needs around permission types, and ultimately decide requirements that exist for users as they come and go to access information. If the group of users is small (<20), it may be easy for an administrator to determine what permissions each user should have. But what if thousands of users within an organization need access to the data in some capacity? And what if there are different levels of visibility to the data depending on the user’s role within the organization? These questions can be harder for an administrator to answer themselves, and cause bottlenecks in data access for users.

An entitlement management model is an important part of data governance. Unified entitlements provide a holistic definition of access rights. You can read more about the value of unified entitlements here. This model can be designed and implemented within a semantic layer, providing an organization with roles and associated permissions for different types of data users. Below is an example of an organizational entitlements model with roles, and explanations of an example role for fictional user Carol Jones.


Having a consistent and predictable approach to entitlements within a semantic layer framework makes decisions easier for human administrators within a data governance framework. It helps to alleviate questions around how to gain access to information needed for projects if it is not already available to a user, given their entitlements. Clearly defined, consistent, and transparent entitlements provide greater ease of access for users and stronger security measures for user access. The combination of reduction in risk and reduction in lost time makes entitlements an essential area of any enterprise semantic layer framework.

Efficiency

New users are able to be onboarded with the correct permissions sooner by an administrator with a clear understanding of the permissions this new user needs. As the user’s role evolves, they can submit requests for increased permissions.

Risk Mitigation

Administrators and business leads at a high level within the framework are able to see all of the users in a business area and their associated permissions within the semantic layer framework. If the needs of the user change, or as users leave the company, the administrator can quickly and easily remove permissions from the user account. This method of “pruning” permissions within an entitlements model reduces risk by mitigating the chance of users maintaining permissions to information they no longer need.

    Diagnostics

In a data breach, the point of entry can be quickly identified.

Identify Points of Contact

Users who can see the governance model can quickly identify points of contact for specific business areas within an organization’s semantic layer framework. This facilitates communication and collaboration, enabling users to see points of contact to permission areas across the organization.

An entitlement management model addresses the issue of “which users can do what” with the organization’s data. This is commonly addressed by considering which users should be able to access (read), edit (write, update), or create and delete data, often abbreviated as CRUD. Another facet of the data that must be considered is the visibility users should have. If there are parts of the data that should not be seen by all users, this must be accounted for in the model. There may be different groups of users with read permissions, but not for all the same data. These permissions will be assigned via roles, granted by users with an administrative role. 

C=Create, R=Read, U=Update, D=Delete

One method to solve this problem is to develop a set of heuristics for users that the administrator can reference and revise. By having examples of the use cases that they have granted permissions for, they can reference these when deciding what permissions to grant new users within a model, or users whose data needs have evolved. It is difficult to predict all individual user needs, especially as an organization grows and as technology advances. Implementing a set of user heuristics allows administrators to be consistent in granting user permissions to semantically linked data. They are able to mitigate risk and provide appropriate access to the users within the organization. The table below shows some common heuristics, who to apply them to and a decision if the entitlements needs further review. A similar approach is the Adaptable Rule Framework (ARF).

This method serves as a precursor to documenting a formal process for entitling, which should include the steps, sequence, requirements, and timeliness in which users are entitled to access data augmented by a semantic layer. These entitlements will determine where in the semantic layer framework users can go and their ability to impact the framework through their actions. Decisions and documentation of these process elements provide thorough consistency within an organization for managing entitlements.

Enterprise Knowledge (EK) has over 20 years of experience providing strategic knowledge management services. If your organization is looking for more advice for cutting-edge solutions to data governance issues, contact us!  

The post Entitlements Within a Semantic Layer Framework: Benefits of Determining User Roles Within a Data Governance Framework appeared first on Enterprise Knowledge.

]]>
Change Management: If It’s Not Integrated, It’s Not Going to Work https://enterprise-knowledge.com/change-management-if-its-not-integrated-its-not-going-to-work/ Tue, 03 Dec 2019 14:04:29 +0000 https://enterprise-knowledge.com/?p=9749 Series Introduction Effective change management requires the ultimate war-room strategy. You must win over the hearts and minds of the people and ensure those hearts and minds lead to hands doing things in the new way for the long run. … Continue reading

The post Change Management: If It’s Not Integrated, It’s Not Going to Work appeared first on Enterprise Knowledge.

]]>
Series Introduction

Effective change management requires the ultimate war-room strategy. You must win over the hearts and minds of the people and ensure those hearts and minds lead to hands doing things in the new way for the long run. Setting and implementing this strategy shouldn’t be squeezed into the precious few spare minutes of your day. It’s too important. I know that you know this, and likely your senior leaders do as well, but getting leaders to allocate resources, including your time, into change management can be a challenge.

This 4-part blog series will give you the language to build a compelling case that will open the door to a fruitful discussion with your senior leaders regarding the change management you need in your organization. As you read, you’ll learn:

  • What change management is and is not;
  • A metaphor you can reuse to describe why change management matters;
  • How to remove the mystery of change management by describing the work that will take place in three distinct phases;
  • How you’ll use internal data to make evidence-based decisions; and
  • How you’ll calculate and report ROI.

With this knowledge in hand you will be able to concretely answer the questions that your leaders have and secure the change management support you need.

Blog 1: The Change Management You Need

Seek First to Understand

As a change management practitioner, I often need to explain what change management is. However, as Steven Covey advocates in his Seven Habits of Highly Effective People, I try and “seek first to understand, then to be understood.” Therefore, I begin this kind of conversation by aiming to understand what my client’s perceptions of change management are. Often, I’ll hear something along the lines of “that’s the thing you do to get adoption, right?” The frequency of this answer is revealing, as it has demonstrated to me that there is a lot of ambiguity and a lack of understanding of what change management is and what adoption really means.

Change management, at its core, is about changing mindsets, changing behaviors, and then reinforcing and sustaining those changes over time. Good change management, however, also needs to address the complexities of modifying behavior, impacting culture, and gaining real return on the initiative that is being invested in. At EK, our change management experts take “good” change management a step further, practicing what we refer to as Integrated Change Management (ICM).

Integrated Change Management

Three Phases of Change Management. Integrated Change Management.
Describing the work that will take place as part of a change management effort in these three distinct phases will help you remove the mystery of change management.

ICM is the act of integrating leadership support, employee engagement, messaging, processes, success-metrics, and training to ensure swift and sustained adoption of the new way. What makes ICM different from the standard, traditional approach is that we are not just sending out comms and crossing-our-fingers with the hope that people read the material, make the necessary changes, and become advocates rather than resistors. We put in the necessary work and then reap the gains. This is an approach that can be applied at the business-unit level or at the enterprise-level when multiple strategic changes are occurring at once. Additionally, our practitioners also recognize no organization is operating with unlimited time, resources, and funds, as many traditional approaches might suggest. Every organization has restraints, and ICM works within this reality to deliver the target outcomes.

Siloed Work

Many organizations have adopted siloed ways of working. Siloes were originally designed to help teams work more efficiently removing layers of the organization that might distract, detain or otherwise impede the work of a team. People become well-adapted to the processes in their silo and it can create the time-savings that organizations originally intended. Real issues crop up however, when teams need to work across silos. There aren’t tried-and-true processes in place for working across silos, but more importantly, and more often, the relationships are not in place. Relationships are an incredibly undervalued aspect of organizational productivity, the ability to manage change or knowledge transfer.

Because siloed work is incredibly common in today’s workplace, EK’s practitioners begin by getting the structure and processes in place for people across departments and divisions to work efficiently together and build the needed relationships that ‘adoption of the new’ will require. Otherwise, we all know what will happen: hastily drawn up communications plans, strategic visions lost in translation, and mid-level managers struggling to convey to their individual contributors what is expected of them, resulting in a lackluster adoption rating. These are predictable risks that can be mitigated with ICM.

One Boat One Team

To better visualize how ICM works in practice, our consultants use the metaphor of a crew team and the sport of rowing because crew is the ultimate team sport. Every rower must operate their oar in sync with their teammates, entering and coming out of the water at the same time, because every stroke, from each rower, affects the team’s success. It looks easy and effortless when it’s done right, but crew demands that individuals come together to achieve a shared objective. There is no room for individual stars or people chasing personal goals. It requires a “one boat, one team” mentality.

Like crew, committing to long-term change takes grit, stamina, discipline, focus, steadiness, and, yes, sometimes even strength – strength to stand up to possible resistance. One of my colleagues at EK, a former rower and coxswain at the University of Oxford, says of her experience on a crew team: “Despite all the preparation, if you are not in sync, it does not matter how hard you try.”

When managing change, it does not matter how strong each individual leading the change is. What matters most is that all the players are in sync. This ranges from establishing a clear and succinct purpose, to understanding what metrics most signify ROI, to operationalizing the change into the day-to-day reality of the organization. Spending the time upfront by laying the groundwork for change is where you’ll see the most return on investment of effort.

Conclusion

Change management is not simple, but it doesn’t have to be hard. There are ways to work with your organization instead of against it to set up the right structure, processes and relationships to support change at either the business-unit or enterprise-level. This scaffolding has to be set up at the beginning of the initiative, do not save change management for the tail end of the engagement. It is a lesson that too many organizations have learned the hard way. Let’s do change differently this time. Let’s do ICM.

In the upcoming blogs, learn in detail how our experts execute ICM, and set yourself up to take the right steps at the right time, guiding your organization towards success and bringing the vision state to reality.

The post Change Management: If It’s Not Integrated, It’s Not Going to Work appeared first on Enterprise Knowledge.

]]>