TheRuntab in theCSDM Data Foundations Dashboardfocuses on enablingoperationalized, risk-aware use cases, includingIntegrated Risk Management (IRM)andEntity Scoping. These use cases require organizations to understandwhat data is processed,where it resides, andwhich technical components are involved, rather than only service impact for ITSM.

Information Objectsplay a central role at this stage.

Option Ais correct becauseBusiness Applications related to Information Objectsallow organizations to identifywhat types of data (PII, PCI, PHI, regulated data)are processed by each business application. This relationship is essential forrisk classification, regulatory compliance, and audit scopingin IRM. Without it, risk assessments lack data sensitivity context.

Option Dis also correct becauseLogical CIs (such as databases, schemas, or data stores) related to Information Objectsestablishwhere sensitive data is stored or processedat a technical level. This enables IRM to trace risk from business context down to technical exposure, supporting control testing, issue management, and remediation prioritization.

Option B (Location hierarchy) supports foundational data quality but does not directly enable risk or entity scoping. Option C (Business Applications to Application Services) is critical forservice impact and Change/Incident Management, but it is more aligned toservice operationsrather thanrisk and data-centric scoping, which is the focus of the Run playbooks for IRM.

Therefore, the correct answers areA and D, as they directly supportIRM entity scoping, regulatory analysis, and risk visibilitythrough CSDM-aligned data modeling.