BISO Stakeholder Mapping Template

  • Purpose: Identify and prioritize key stakeholders for targeted BISO engagement
  • Usage: Complete quarterly (Month 1, 4, 7, 10) or when stakeholder landscape changes
  • Time Required: 30-45 minutes initial mapping, 15-20 minutes quarterly updates

What is Stakeholder Mapping?

The Power-Interest Matrix helps BISOs prioritize engagement by plotting stakeholders on two dimensions:

  • POWER: Ability to influence BISO program decisions and resources
  • INTEREST: Level of concern/involvement in BISO activities and outcomes

This creates four stakeholder categories with distinct engagement strategies.


The Power-Interest Matrix (Blank Template)

┌─────────────────────────────────────────────────────────────────────────────┐
│                        STAKEHOLDER POWER-INTEREST MATRIX                     │
├─────────────────────────────────────────────────────────────────────────────┤
│        High Power                                                           │
│   ┌──────────────────────────────────────────────────────────┐              │
│   │  KEEP SATISFIED             │    MANAGE CLOSELY           │              │
│   │  (High Power, Low Interest) │    (High Power, High Interest)            │
│ P │                              │                             │              │
│ O │  Strategy: Keep informed     │    Strategy: Key partners  │              │
│ W │  Frequency: Monthly updates  │    Frequency: Weekly touch │              │
│ E │                              │                             │              │
│ R │  Your Stakeholders:          │    Your Stakeholders:       │              │
│   │                              │                             │              │
│   │  •                           │    •                        │              │
│   │  •                           │    •                        │              │
│   │  •                           │    •                        │              │
│   │                              │                             │              │
│   ├──────────────────────────────┼─────────────────────────────┤              │
│   │  MONITOR                     │    KEEP INFORMED            │              │
│   │  (Low Power, Low Interest)   │    (Low Power, High Interest)             │
│   │                              │                             │              │
│   │  Strategy: Minimal effort    │    Strategy: Keep updated   │              │
│   │  Frequency: Quarterly/As-needed  Frequency: Monthly/Bi-weekly           │
│   │                              │                             │              │
│   │  Your Stakeholders:          │    Your Stakeholders:       │              │
│   │                              │                             │              │
│   │  •                           │    •                        │              │
│   │  •                           │    •                        │              │
│   │  •                           │    •                        │              │
│   │                              │                             │              │
│   └──────────────────────────────────────────────────────────┘              │
│        Low Power                                                            │
│                    Low Interest ←──────────→ High Interest                  │
└─────────────────────────────────────────────────────────────────────────────┘

How to Complete This Template

Step 1: List Your Stakeholders (5-10 minutes)

Write down everyone who impacts or is impacted by your BISO program:

Executive Leadership:

  • CEO
  • CISO
  • CFO
  • CRO (Chief Risk Officer)
  • COO
  • Business Unit Presidents

Business Unit Leaders:

  • VPs of major business units
  • Directors
  • Senior Managers
  • Product Managers

Risk & Compliance:

  • Compliance Officers
  • Risk Managers
  • Internal Audit
  • Legal Counsel

Technology:

  • CIO/CTO
  • IT Directors
  • Solution Architects
  • DevOps Teams

External:

  • Regulators
  • External Auditors
  • Key Vendors
  • Partners

Step 2: Assess POWER (5-10 minutes)

For each stakeholder, ask:

HIGH POWER = YES to 2+ questions:

  • Can they approve/deny BISO budget or resources?
  • Can they influence executive perception of BISO program?
  • Do they control access to business units or data?
  • Can they escalate issues that impact BISO effectiveness?

LOW POWER = NO to most questions

Step 3: Assess INTEREST (5-10 minutes)

For each stakeholder, ask:

HIGH INTEREST = YES to 2+ questions:

  • Are they directly impacted by BISO decisions/activities?
  • Do they frequently request BISO support or consultation?
  • Are they vocal about security or BISO program topics?
  • Do they proactively engage with BISO team?

LOW INTEREST = NO to most questions

Step 4: Plot on Matrix (5-10 minutes)

Place each stakeholder in appropriate quadrant based on Power + Interest assessment.

Step 5: Define Engagement Strategy (10-15 minutes)

Use the Engagement Strategy Guide below to plan touchpoints for each stakeholder.


Engagement Strategy Guide by Quadrant

🔴 MANAGE CLOSELY (High Power, High Interest)

Who: CEO, CISO, CRO, Business Unit Presidents actively engaged

Strategy:

  • Weekly touchpoints (meetings, status updates, consultations)
  • Involve in major decisions early
  • Seek input and feedback regularly
  • Build deep trust relationships (use NTS trust scorecard)
  • Make them BISO program champions

Risk if ignored: Program failure, lost support, resource cuts


🟡 KEEP SATISFIED (High Power, Low Interest)

Who: CFO, COO, Board members, Legal (unless compliance-heavy org)

Strategy:

  • Monthly executive summaries
  • Quarterly business reviews
  • Keep informed of major milestones/issues
  • Don’t overwhelm with details
  • Surface for critical decisions only

Risk if ignored: Surprise objections, budget challenges, blocked decisions


🟢 KEEP INFORMED (Low Power, High Interest)

Who: Security teams, IT managers, product managers, enthusiastic champions

Strategy:

  • Bi-weekly or monthly updates
  • Include in relevant meetings/working groups
  • Use as BISO advocates and informal communication channel
  • Provide detailed information (they want it)
  • Leverage their enthusiasm

Risk if ignored: Loss of allies, misinformation spread, missed opportunities


⚪ MONITOR (Low Power, Low Interest)

Who: External vendors (some), peripheral functions, occasional contacts

Strategy:

  • Quarterly updates or as-needed basis
  • Minimal active engagement
  • Watch for changes in power or interest
  • Basic awareness communications only

Risk if ignored: Minimal (but monitor for changes)


Stakeholder Relationship Tracking Table

Use this table to track ongoing stakeholder relationships:

Name Function/Role Quadrant Key Interests Touchpoint Cadence Status Last Contact Next Action
[Name] [Title] MANAGE CLOSELY Business enablement Weekly 🟢 Strong [Date] [Action]
[Name] [Title] KEEP SATISFIED Budget oversight Monthly 🟡 Neutral [Date] [Action]
[Name] [Title] KEEP INFORMED Security collaboration Bi-weekly 🟢 Strong [Date] [Action]
[Name] [Title] MONITOR Compliance updates Quarterly ⚪ Aware [Date] [Action]

Status Legend:

  • 🟢 Strong: High trust, active collaboration, positive relationship
  • 🟡 Neutral: Professional relationship, transactional, room for improvement
  • 🔴 At Risk: Low trust, conflict, relationship needs repair
  • Aware: Basic awareness, minimal relationship

Example Stakeholder Mapping (Financial Services)

┌─────────────────────────────────────────────────────────────────────────────┐
│                    EXAMPLE: FINANCIAL SERVICES BISO PROGRAM                  │
├─────────────────────────────────────────────────────────────────────────────┤
│        High Power                                                           │
│   ┌──────────────────────────────────────────────────────────┐              │
│   │  KEEP SATISFIED             │    MANAGE CLOSELY           │              │
│   │                              │                             │              │
│   │  • CFO (Budget Authority)   │    • CEO (Strategic Sponsor)│              │
│   │  • COO (Operational Impact) │    • CISO (Program Owner)   │              │
│   │  • Business Unit Presidents │    • CRO (Risk Oversight)   │              │
│   │  • Board/Audit Committee    │    • Consumer Banking VP    │              │
│   │  • Legal/Compliance Lead    │    • Commercial Banking VP  │              │
│   │                              │                             │              │
│   │  Frequency: Monthly 🟢       │    Frequency: Weekly 🔴     │              │
│   │                              │                             │              │
│   ├──────────────────────────────┼─────────────────────────────┤              │
│   │  MONITOR                     │    KEEP INFORMED            │              │
│   │                              │                             │              │
│   │  • HR Leadership             │    • CTO/Technology Teams   │              │
│   │  • External Auditors         │    • Security Operations    │              │
│   │  • Third-party Vendors       │    • Product Managers       │              │
│   │  • Industry Peers            │    • Compliance Analysts    │              │
│   │                              │    • IT Security Architects │              │
│   │                              │                             │              │
│   │  Frequency: Quarterly ⚪      │    Frequency: Bi-weekly 🟡  │              │
│   │                              │                             │              │
│   └──────────────────────────────────────────────────────────┘              │
│        Low Power                                                            │
│                    Low Interest ←──────────→ High Interest                  │
└─────────────────────────────────────────────────────────────────────────────┘

When to Update Your Stakeholder Map

Quarterly Review (Recommended):

  • Reassess power and interest levels
  • Update stakeholder positions (people move quadrants!)
  • Adjust engagement strategies accordingly

Ad-Hoc Updates (As Needed):

  • New executive joins organization
  • Organization restructuring
  • Major program milestone (success or challenge)
  • Significant stakeholder feedback (positive or negative)
  • Budget cycle planning
  • Annual performance reviews

Integration with Other BISO Tools

Use this stakeholder map with:

  1. Trust Scorecard (NTS) → Measure relationship quality with “Manage Closely” stakeholders
  2. Monthly NTS Survey → Gather trust and diagnostic feedback from “Manage Closely” and “Keep Informed” groups
  3. Communication Calendar → Schedule touchpoints based on quadrant strategy
  4. Escalation Framework → Know who to escalate to (power dimension)
  5. Success Metrics → Track stakeholder satisfaction by quadrant

Tips for Success

✅ DO:

  • Update quarterly or when landscape changes
  • Share with your BISO team for coordinated engagement
  • Use as input for communication planning
  • Track relationship status changes over time
  • Celebrate movement of stakeholders to “Manage Closely” (growing interest!)

❌ DON’T:

  • Create once and forget (it gets stale quickly)
  • Share stakeholder map outside BISO team (internal tool only)
  • Ignore “Monitor” stakeholders completely (they can move quadrants)
  • Over-engage “Monitor” group (wastes their time and yours)
  • Treat as static (power and interest change frequently)

Quick Reference Card

Quadrant Power Interest Strategy Frequency Risk Level
Manage Closely High High Key partners, deep engagement Weekly 🔴 High
Keep Satisfied High Low Keep informed, don’t overwhelm Monthly 🟡 Medium
Keep Informed Low High Detailed updates, leverage enthusiasm Bi-weekly 🟢 Low
Monitor Low Low Minimal effort, watch for changes Quarterly ⚪ Minimal

  • BISOPRO-04: Stakeholder Engagement Protocols (comprehensive engagement strategies)
  • BISOPRO-14: Executive Sponsorship Plan (executive-specific stakeholder management)
  • 02_Trust_Equation_Scorecard.md: Trust Scorecard (NTS) for relationship quality measurement
  • 03_Monthly_Pulse_Survey.md: Monthly NTS Survey for recurring stakeholder feedback

Next Steps:

  1. Print or save this template
  2. Block 45 minutes on your calendar
  3. Complete Steps 1-5 above
  4. Share with BISO team
  5. Schedule quarterly review (add to calendar now!)

Questions? This is a living tool. Adapt the quadrant labels, frequency, or strategies to fit your organizational culture and stakeholder preferences.