Mapping to existing frameworks that are already instantiated saves time. A full deployment of Six Sigma, Lean Six Sigma, Rummler-Brache, CMMI, ITSM, etc. is not needed to take advantage of selected practices in building a process engineering taxonomy.
Presented below is a component breakdown and process map for Internal Controls over Financial Reporting (ICFR) that shows how the enterprise value chain is decomposed according to Baseline Control domains (business process, application, and IT functional processes). For alignment purposes, the IT Functional processes are then considered from a process engineering and standards perspective. Since the aligned control processes are mapped to both the enterprise value chain and the risk management framework, they can be efficiently leveraged to satisfy GRC and ICFR compliance objectives.
