Documents/NSISS/2: Discovery & Access/2.4: Data Correlation

2.4: Data Correlation

Enhance Enterprise-Wide Data Correlation

Other Information:

Connecting related information from disparate department and agency databases can mean the difference between identifying a threat during the planning stage or analyzing what could have been done to thwart the attack after it occurs. Data correlation and advanced analytics, coupled with integrated sharing and safeguarding protections, will enable users to reference authoritative, up-to-date information across multiple agency holdings. This capability can support analysts' efforts to identify relationships among people, places, things, and characteristics that are otherwise not apparent. To advance this capability while taking into account increasing volumes of information, stakeholders need to make their information accessible so an analyst can create a single query to search across many information sources. Analysts also need automated capabilities to establish linkages across holdings and generate alerts when mission-relevant information becomes available. While current technologies require centralized information repositories, which may yet remain appropriate in some limited cases, a decentralized approach allows the originator to maintain and update information as needed. This promises increased speed in sharing and higher levels of information fidelity. Successful data correlation also requires a validation component to determine the veracity and applicability of information before action.

Indicator(s):