Activity-in-Diagram: Determine Evaluation Data Needed

CreatorTim Ramey

Description

Identify evaluation data needed to support the DSQs. Evaluation data needed is discovered by examining the system specification, PPP, Cybersecurity Strategy, RMF Security Plan, OT data requirements, mission CONOPS, mission threads, and Phase 2 results. Needed evaluation data comes from testing the interfaces component, and system planned. Before test events are identified and entered in the DEF, the PM should identify the scope of testing.

Owning Diagram A121: Develop the Initial DEF

Input

Program Protection Plan (PPP)

system specification

cyber security strategy

RMF security plan

mission CONOPS

OT data requirements

mission threads

Output

evaluation data needed

Control

Decision Support Question (DSQ)

catalog of cybersecurity requirements