Stage II: Analysis

Analyze business-supportive security and privacy requirements and the existing or planned capabilities that support security and privacy.

Other Information:

In Stage II agencies analyze their business-supportive security and privacy requirements and the existing or planned capabilities that support security and privacy. Stage II’s three analyses help agencies: * Identify gaps between requirements and current or planned capabilities. * Identify opportunities to increase interoperability between or reduce costs of current or planned capabilities. * Propose solutions to address gaps or improve capabilities based on an informed trade-off analysis of alternatives.

Objective(s):

II.A.1: Gaps

II.A.1.a: Requirments & Capabilities

II.A.1.a.1: Control Mapping

II.A.1.a.2: Target Architecture

II.A.1.b: Risk Assessment

II.A.1.c: EA & POA&M

II.A.2: Capability Analysis

II.A.2.a: Assessment Aggregation

II.A.2.a.i: Opportunities

II.A.2.a.ii: Agency Standards

II.A.2.a.iii: Non-Specific Capabilities

II.A.2.b: Control Evaluation

II.B.1: Alternative Analysis

II.B.1.a: Risk

II.B.1.b: Life Cycle Costs

II.B.1.c: Inventory

II.B.2: Gaps & Improvements

II.B.2.a: Alternatives

II.B.2.b: Costs, Benefits & Risks

II.B.2.c: Interaction

II.B.2.d: Cash Flow Summary

II.B.3.a: Internally Deployed Capabilities

II.B.3.b: Other Agencies' Solutions

II.B.3.c: ISS LOB

II.B.3.d: Communities of Practice

II.B.4: COTS

II.B.5: Comparisons

II.C.1: Gap & Legacy

II.C.2: Formats

II.C.3: ITIRB

Content