The IA Framework - Information Assurance Architecture - page 35

IA), as well as the characteristics of IA elements (depth of IA). Appendix D presents
more detail on IA categories and IA elements.
The following sections elaborate on the ELCM phases as they relate to IA 2 .

2.9.1 Concept

Any idea starts with conception, which is the first phase in the ELCM. Chapter 12
presents an innovation framework to assist in determining the need for business
change and what about the business needs to change. The innovation framework
provides a discipline for idea conception. The intent of considering risk in the con-
cept phase is not to dissuade pursuit of the idea. To the contrary, early consideration
of risk raises awareness of important realities. IA 2 provides a disciplined approach
to deal with these risks in a rational manner that becomes part of the solution.

2.9.2 Architect

The ELCM architect phase guides the enterprise fit of the concept. This includes
enterprise architecture and information assurance architecture. The architect phase
looks at the business fit of the concept and begins to shape the concept in the form
of a solution or series of solutions, where solution may involve a technology, a pro-
cess, or people. The solution may be entirely new, or the solution may be to modify
existing enterprise elements.
The architect phase is the primary focus of the IA architect and the primary
application of the IA 2 Framework and IA 2 Process. The architect phase segues into
the engineer phase, which looks at the technical fit of the solution.

2.9.3 Engineer

Engineering looks at the technical details behind the business focus of the architec-
ture. The focus of the ELCM engineer phase is on the technical fit of the solution in
the enterprise. Engineering may include systems engineering for a discrete system or
for a system of systems. The engineering phase may also include enterprise systems
engineering where the engineering approach must accommodate an environment
of complexity; e.g., initially unknown requirements that will emerge with use of
the system. The ELCM engineer phase provides additional details to development
and acquisition of features to ensure technical fit of the final solution.

2.9.4 Acquire/Develop

A good principle in acquisition/development decisions is outsource before buy and
buy before build . In-house development and operations is expensive. Many organi-