The IA Framework - Information Assurance Architecture - page 32

table 2.2 iA 2 principles (Continued)

IA 2 Principle Definition

Flexibility Flexible to apply to private and public sector and to

align with various SLCM, SDLC, and ELCM standards
and practices.

Harmony To reach a state of optimality by way of integration;

e.g., IA in harmony with business operations implies
an integration of both, with the result being optimal
business operations that are also optimally secure.

Implementation
agnostic

The IA 2 Framework is independent from services and
tools that provide the operational solution; the
selection of services and tools should align with the
architecture, but the architecture is not dependent on
specific services or tools.

Integrate from
inception

Insert IA considerations as part of the innovation
process and through the ELCM.

Modularity Separate the IA 2 Framework into discrete parts and

provide the ability to apply a subset of IA 2 parts to fit
the needs of the current situation.

Pragmatism/practicality Architecture is often abstract in nature to

accommodate principles of modularity, extensibility,
and agility. However, there is need to map abstract
architectural concepts to business requirements and
ultimately to a final solution including product
selection, implementation, and operations; that is,
provide a line of sight between architectural
abstraction and product implementation. Fiscally
optimize commercial-oriented shareholder value
(SHV) or public-oriented constituent value (CV),
which may also be considered citizen value.

Provide for IA
elements

Protect information and information technology with
respect to core IA principles: confidentiality,
possession, integrity, utility, availability, authenticity,
authorized use, privacy, and nonrepudiation; in
keeping with the extensible principle, IA 2 may
accommodate additional IA elements.

Repeatability Provide a framework and process that are repeatable.