How We Work · The RDA Operating Model

Structured technology.
Connected to the organization.

RDA connects what needs to be managed, how the work gets done, the tools used to support it, the requirements that apply, the evidence created, and the lifecycle and budget behind it.

Management red circle Software blue diamond Network green triangle
WHAT
HOW
PROOF

The RDA Operating Model

Six connected pieces turn individual technical tasks into a manageable operating system. The Service Matrix defines the work; the rest of the model makes it repeatable, supportable, auditable, and planable.

1

Service Matrix

What we manage

2

Workflow

How we do it

3

Tech Stack

What supports it

4

Controls

Why it is required

5

Evidence

How we prove it

6

Lifecycle & Budget

How we plan ahead

1

Service Matrix

Defining what needs to be managed

Technology environments contain hundreds of individual responsibilities. RDA organizes them into a consistent hierarchy: Cost Center → Service Class → Service / Topic. The public website summarizes the major areas; internally the matrix continues into detailed responsibility, workflow, controls, and evidence.

The outcome
  • Clear scope and ownership
  • Fewer technology blind spots
  • Consistent service definitions
  • A common language for operations
2

Workflow

Turning responsibility into repeatable work

A service only becomes operational when there is a repeatable way to deliver it. Workflows connect requests, projects, changes, security work, maintenance, reviews, and replacement activities so the process does not depend on one person's memory.

Identify → Assess → Plan → Approve → Implement → Verify → Document → Operate → Review
Typical workflow elements
  • Ownership and approvals
  • Preparation and change control
  • Implementation and testing
  • Documentation and handoff
  • Scheduled review and improvement
3

Tech Stack

Tools support the process. They do not define it.

RDA uses technology to automate, monitor, protect, document, and measure the workflows. Products can change over time; the business requirement and operational responsibility remain. That keeps the client from being designed around a vendor's product catalog.

Functional areas
  • Service management and remote support
  • Monitoring and network visibility
  • Endpoint and threat protection
  • Identity and access
  • Vulnerability management
  • Backup and recovery
  • Email, cloud, and Microsoft services
4

Controls & Requirements

Connecting operations to what the organization must do

Security and compliance are most useful when they are part of normal operations. RDA maps services and workflows to the controls that apply to the environment rather than treating compliance as an annual document exercise.

Examples
  • NIST Cybersecurity Framework
  • CIS Controls
  • CJIS
  • CMMC
  • 201 CMR 17.00
  • PCI DSS
  • ISO-aligned controls and client policy
5

Evidence

Being able to show what was done

Good technology operations naturally produce records. Evidence helps during audits and incidents, but its everyday value is accountability and institutional knowledge: what changed, who approved it, what was tested, and what still needs attention.

Evidence can include
  • Tickets and change records
  • Inventories and configurations
  • Scan and patch results
  • Backup and recovery tests
  • Access reviews and approvals
  • Training, policies, and procedures
  • Project and lifecycle records
6

Lifecycle & Budget

Connecting technical work to long-term planning

Technology should become a management decision before it becomes an emergency. RDA connects inventory, condition, risk, recommendation, replacement timing, projects, and budget so leadership can see what is coming and make informed decisions.

Inventory → Condition → Risk → Recommendation → Budget → Project → Operate → Replace / Retire
The planning view
  • Current assets and dependencies
  • Known risks and end-of-life dates
  • Upcoming projects
  • Capital and operating forecasts
  • Fewer surprises

Bringing it together

RDA does not look at technology as a collection of unrelated products. A user depends on identity. Identity connects to applications and data. Applications depend on servers, cloud platforms, networks, communications, security, backup, policies, vendors, documentation, budgets, and people.

A change in one area can affect many others. The purpose of the operating model is to understand those relationships and manage them as a whole.

What we manage → How we manage it → What supports the work → What requirements apply → How we demonstrate the work → How we plan for the future.

Work with us — or make us part of your IT department.

RDA can work alongside internal staff, coordinate specialists and vendors, fill specific gaps, or operate as the outsourced IT department. The operating model remains the same: understand the organization, define responsibility, execute consistently, document the work, and keep planning ahead.