BPMN 2.0, or Business Process Model and Notation 2.0, is a standard graphical language for describing business workflows in a consistent way. It uses symbols for events, tasks, decisions, and handoffs so teams can map how work moves across people and systems. Unlike informal flowcharts, BPMN 2.0 is precise enough to support analysis, automation, and process mining.
In cyber security, BPMN 2.0 helps defenders document approval chains, access requests, incident response, and segregation-of-duties controls. That matters because weak or unclear workflows create openings for fraud, privilege abuse, and control bypass. Security teams can use BPMN models to spot unnecessary handoffs, duplicate approvals, and missing checks before automating them. Attackers often exploit these process gaps rather than technical flaws, so a clear BPMN model can expose where a workflow is easy to manipulate, and where controls should be enforced.