Information Technology Reference
In-Depth Information
table 3.8
iA
2
F Views: inpu
t examples
IA
2
F Views
Details
People
Input from executives, business management,
legal, and technical management provides
governance for determining the business need,
business fit, and business justification for the
RFID system.
Policy
The governance process will validate policy
changes and forward to XYZ, chief operating
officer, for final signature.
Business process
There are no documents regarding the current
business processes in which the RFID card will fit.
Systems and applications
System and application documentation is
necessary for the in-scope systems and
applications. Vendor input is necessary to verify
that application XYZ may accommodate
additional biometric details and interface to
biometric registration and processing systems.
Data/information
Location, producer, consumer, owner,
classification
Infrastructure
The network operations team will provide input
regarding bandwidth capacity as well as server
capacity and performance to ensure necessary
simultaneous entries/exits are technically
possible.
Internal to the organization
N/A
External to the organization
N/A
he IA
2
Process phases are often iterative, with details from one phase providing
additional insight for other phases.
The manner of discovery and the level of detail to record are situational depen-
dent. The templates and guides in the appendices are tools that may assist in the
discovery process.
3.3.6
Analysis
3.3.6.1
Evaluate the Current State
The results of the discovery effort require analysis to determine applicability and
fit with an IA
2
that identifies, enumerates, articulates, and addresses the business
risks. Such analysis may address people, business drivers, policy, business process,
