Information Technology Reference
In-Depth Information
fore, a discovery phase is a large part of the project effort. All these are included in
the IA
2
Process.
3.2
objecties
The objective of this chapter is to present details of the IA
2
Process (IA
2
P). he
material in this chapter will enable you to apply a disciplined method for using the
IA
2
Framework to identify, enumerate, articulate, and address risks to your organi-
zation overall or the current project you are working on.
3.3 the iA
2
process
The IA architect uses the IA
2
Framework as a conceptual structure that brings order
to information assurance. The IA architect then uses the IA
2
Process to apply that
conceptual structure to the business situation at hand. The IA
2
P may be a single
process with a beginning and an end, or IA
2
P may be a series of processes for the
IA architect to apply as circumstances dictate.
he IA
2
Process consists of eight steps:
1. Articulate the intent of the IA architecture (IA
2
).
2. Define the environment of the IA
2
.
3. Define the scope of the IA
2
.
4. Identify inputs to the IA
2
(influences and constraints).
5. Discover and document the current organizational posture.
6. Analyze the discovery findings.
7. Identify outputs from the IA
2
including documents, products, services, and
actions.
8. Produce outputs.
Steps 1 through 4 are preparation and provide the ability to define the to be
state for the IA
2
. Step 5 discovers the as-is artifacts, practices, people, and organiza-
tional attributes within the scope and environment. Step 6 analyzes the as-is infor-
mation to understand the current organizational posture with respect to IA within
scope. Steps 7 and 8 identify and produce the IA
2
artifacts and actions necessary to
transition from the as-is to the to be state of IA within the scope and environment.
Figure 3.1 shows the IA
2
Process steps.
he IA
2
Process uses the IA
2
Framework to decompose complex problems into
views and perspectives. Part of the IA
2
Process is to determine what IA
2
F views
are applicable, then to determine what aspects of those views are relevant. The IA
2
framework views are: people, business process, policy, systems and applications,
information/data, and infrastructure. The perspectives are the drivers (business,
technical); intra-, inter-, endo-, or exo-organizational; the compliance require-
