Project
ITSM and CMDB rebuild ahead of control mapping
Ownership, CI quality, and change process made trustworthy enough for GRC.
Anonymized examples — not named clients.
- No.
- P—02
- Sector
- Compliance tooling
- Location
- Switzerland
- Year
- 2024–25
- Role
- Assessment to operation
- Phases
Scope
4 of five phases delivered.
Assess
Delivered
Define
Delivered
Build
Delivered
Migrate
Not in scope
Operate
Delivered
Story
Story
Situation
CMDB quality and ownership blocked any honest control mapping. GRC could not trust the operational inventory.
What we did
Rebuilt CI classes, ownership, and change process so the operational system of record could feed GRC without a second spreadsheet inventory.
Result
A CMDB the GRC team can use — ownership clear enough for assessments to land on real systems.
Control mapping is only as honest as the CMDB underneath it.
Next
Similar problem?
Tell us what the system does today and where it hurts. We will say honestly whether we are the right partner.
Contact