Customer Journey Mapping (CJM) is all about enhancing the customer experience and getting more people engaged. However, because cyber threats are constantly changing and digital technology is evolving, adding security to CJM has become a business-critical necessity. This article changes the function of the Business Analyst (BA) by showing how they can find and reduce cybersecurity risks at every stage of the customer experience, thereby building customer confidence.

Many books provide guidance on how to create effective user interface displays, a vital aspect of the user’s experience with a software application. But a user often must navigate through a series of screens to perform a task. Making that flow sequence logical and efficient is also an important part of the user experience.

I’m a big fan of analysis modeling, drawing diagrams that visually represent various aspects of a software system and its requirements. One of my favorite models is the dialog map, which provides a convenient way to represent, validate, and improve how a user navigates through a user interface.

The breathless pronouncements surrounding Artificial Intelligence often paint a picture of wholesale disruption, a technological tidal wave poised to obliterate established business practices. Yet the truth is more nuanced: AI does not replace strategy; it replaces bad strategy. In the absence of a coherent, adaptive, and intentional strategic framework, AI does not generate value, it magnifies inefficiency.

Vibe Coding is a new paradigm in coding, where developers and non-developers use natural language prompts to generate functional code.  Vibe Coding can be leveraged in business analysis by accelerating and enhancing Rapid Prototyping, Automating Technical Tasks, and Enhancing Requirement Validation.

“For here or to go?” What’s going on? Isn’t this a term from the food and restaurant industry?? Of course, we all are familiar with this term all across the world. What does this have in common with the role of a Business Analyst? Or am I mixing up something? Not really. It is a similar question to whether, as a BA Manager, it is better to have the BAs from my team come to the office (for "here") or that they work from home or remotely ("to go" meaning allow to work from home or anywhere)?

This article discusses how the discovery process must shift from a merely functional exploration to one that includes a structured view of risk. By including security considerations in process mapping from the start, businesses may prevent the accumulation of security debt and design systems that are both robust and compliant.

I measure the success of my 50+ year career in IT by the positive feedback I’ve received from colleagues, stakeholders, students, and readers. I started as a Cobol programmer, progressed to software analyst/designer, and for the last 30 years have performed the role of business analyst. Interspersed in those years I’ve shared what I’d learned through writing, teaching, presenting, and mentoring. This article discusses the top seven “Takeaway Points” from the over-30 BA resources I’ve produced related to requirements for information systems.

If you’re a Business Analyst assigned to a medical device development project, intended for the US market, understanding the FDA’s approval process is critical to ensure that product requirements, documentation, and risk controls are aligned with compliance expectations. This article outlines the FDA’s classification framework, approval pathways (510(k), De Novo, PMA), and the risk management process. It also highlights how a Business Analyst contributes to hazard identification, traceability matrices, and risk control measures, while preparing submissions under FDA regulations and ISO 14971.

Tariffs are not just economic instruments—they’re strategic signals. For business analysts, Trump's latest trade measures are more than policy—they’re a masterclass in navigating disruption, identifying leverage, and transforming systemic friction into strategic insight.

Integrating least privilege into business analysis is critical for developing secure, well-governed systems. When role modeling is handled early, business analysts help reduce unnecessary access, reduce compliance gaps, and improve operational efficiency throughout the organization. Analysts can make substantial contributions to access governance throughout the system lifecycle by leveraging tools like CRUD matrices, role-function overlays, and access review templates. Access modeling, when it is used as part of core business analysis, improves audit readiness, enhances regulatory compliance, and reduces the risk of privilege misuse before it becomes a major issue.

A reader wrote to me with questions regarding a development project that he thought involved too many requirements and too little flexibility around requirement priorities. (You’ve never heard of such a thing before, right?) 

By adopting the General Contractor mindset and the practices described in this article, you move from “requirements writer” to builder of business value. The next time someone questions the need for a BA, invite them to imagine a skyscraper with no contractor on site. Once they picture the chaos, they will hand you the hardhat—and the authority—to orchestrate delivery the way only a seasoned GC‑style Business Analyst can.

In business analysis, success is not only measured by the projects you complete but by the respect you earn along the way. Institutional respect may give you power, but interpersonal respect gives you influence—and the most successful professionals know how to harness both.

As you continue to advance in your career, remember that the real leaders aren’t just those with the most impressive titles, but those who inspire the deepest respect. By building both forms of respect strategically, you’ll not only advance your career but also create lasting impact in your organization.

In today's business world driven by data, companies rely more and more on precise, well-managed, and protected data to stay ahead and meet regulatory requirements. Business analysts (BAs) are crucial in connecting business objectives, data governance plans, and cybersecurity measures. Their ability to comprehend technical and business factors allows them to create data governance strategies that guarantee data quality and availability while also protecting it from changing cybersecurity risks.

How do you ask the right question?  Would it surprise you to know that perhaps the best way of asking the right question is to keep your mouth shut and not ask anything at all?

That previous statement might require some explanation.  What I'm talking about here is the pause.  It is the space between your response to someone's question, response  or comment and the space before the next question you are asking or comment you are making.