{"id":15306,"date":"2021-07-14T17:30:13","date_gmt":"2021-07-14T15:30:13","guid":{"rendered":"https:\/\/duthler.nl\/services\/advice-and-investigations\/baseline-implementation\/"},"modified":"2026-02-16T08:33:17","modified_gmt":"2026-02-16T07:33:17","slug":"managing-company-specific-baselines","status":"publish","type":"page","link":"https:\/\/duthler.nl\/en\/services\/risk-and-compliance-management\/managing-company-specific-baselines\/","title":{"rendered":"Managing company-specific baselines"},"content":{"rendered":"\n
<\/span>
\n
<\/div>\n\n\n\n
\n
\n

Managing company-specific baselines<\/h2>\n\n\n\n

We need to know where we are in order to determine where we want to go. A baseline helps us test where we are (the maturity level) as well as where we wish to go (the ambition level). You could say that a baseline objectifies qualitative positions and goals.<\/p>\n\n\n\n

There are a whole range of baselines. Sometimes the baselines are so well established that we regard the baselines as standards (eg number series, units, or practically, container dimensions or track width). The legislator increasingly obliges companies to account for the organization of compliance with legal requirements, for example for taking appropriate and effective control measures aimed at protecting data. Such requirements are also contractually imposed by a company on its information service providers.<\/p>\n\n\n\n

What are appropriate and effective controls included in business processes supported by IT systems? Using baselines, a company objectifies the requirements of its business processes and can implement targeted control measures.<\/p>\n\n\n\n

\n
Interested? Please, contact us.<\/a><\/div>\n<\/div>\n<\/div>\n\n\n\n
<\/div>\n<\/div>\n\n\n\n
<\/div>\n<\/div><\/div>\n\n\n\n
<\/span>
\n
<\/div>\n\n\n\n

Some examples of baselines<\/h2>\n\n\n\n

Depending on the business activities, the company management chooses the standards and baselines. The legislature may require the company to adopt standards, customers may require the use of standards and baselines from their supplier(s), and organizing business operations may be more effective and cost-efficient with standards and baselines. <\/p>\n\n\n\n

We can identify baselines when organizing business activities. Some examples.<\/p>\n\n\n\n

\n
Organizing the information infrastructure<\/div>
\n

The information infrastructure usually consists of a network, databases and systems with which the employees of a company communicate with each other and with the outside world. Companies are increasingly using cloud vendors to organize their information infrastructure. To facilitate the acquisition and management of these infrastructures, baselines are available against which acquisition and use can be tested. Think of ISO, NEN<\/a> or NOREA<\/a> models. Both internal implementation and outsourcing can be accountable using baselines.This is just a placeholder to help you visualize how the content is displayed in the tabs. Voel je vrij om dit te bewerken met je eigenlijke inhoud.<\/p>\n<\/div><\/div>\n\n\n\n

Applying baselines<\/div>
\n

Cloud environments offer the ability to apply baselines. MS 365 and Azure tenants do this by letting their customers use baselines to effectively organize IT risk management and compliance management. This is just a placeholder to help you visualize how content is displayed in the tabs. Feel free to edit this with your actual content.<\/p>\n<\/div><\/div>\n\n\n\n

Organizing IT systems to support business processes<\/div>
\n

To IT systems, which support business processes with embedded control measures, the company management sets functional and non-functional requirements. If the IT systems are developed then the requirements mirror in user stories<\/em> and otherwise the requirements mirror in a baseline used in a package selection.This is just a placeholder to help you visualize how the content is displayed in the tabs. Feel free to edit this with your actual content.<\/p>\n<\/div><\/div>\n\n\n\n

Making arrangements<\/div>
\n

Baselines are practical and effective for making agreements. When agreeing to provide information, a baseline can be added to a request for proposal allowing the offer to be tested against that baseline. In this way, the baseline is used as a practical assessment framework. During contract management, baselines help manage mutual expectations. <\/p>\n\n\n\n

The baselines give a sense that no essential management measures have been forgotten. It also avoids agreeing on duplicate measures. The baselines are not static because laws, regulations, contractual agreements and policies can change the baselines. <\/p>\n\n\n\n

Companies use the baselines when managing changes in the organization of business activities.<\/p>\n<\/div><\/div>\n<\/div><\/div>\n\n\n\n

<\/div>\n<\/div><\/div>\n\n\n\n
<\/span>
\n
<\/div>\n\n\n\n

What is our service?<\/h2>\n\n\n\n

Before we can start, we need an overview of the responsibility and liability domain, and insight into the business activities of organizational units. Based on this context information, we can take the next steps.<\/p>\n\n\n\n