Architecting the Industrial Internet

Governance and Assuring Compliance

Governance can be broadly defined as putting into place the organizational structures and processes needed to ensure that business and technical strategies and objectives can be achieved. In the previous chapter, we described how to secure the IIoT architecture to mitigate risk associated with cybersecurity threats. Here, we'll describe how architectural planning for governance and risk avoidance in Industrial Internet projects can lead to compliance with worldwide, domestic, and industry regulations. The assessing of governance, risk, and compliance is sometimes referred to as GRC.

We will take a broader view of GRC here beyond standards and certifications. In addition to securing the infrastructure and ...