Table 7. Reviews for a Complexity Level 2 Project Sample Complexity 2 Project Follow your Project Process Agreement – XLC Phase XLC Review Review Type Artifacts Initiation, Architecture Governance Project Management Artifacts: Concept, and Review (AR) N/A Planning Security Artifacts and Information: Privacy Impact Assessment (P) Security Categorization Worksheet (F) Systems Development Artifacts: Enterprise Architecture Analysis Artifacts (P) IT Intake Form (F) Investment Governance Project Management Artifacts: Selection Project Process Agreement (B) Review (ISR) Security Artifacts and Information: Business Risk Assessment (P), including Maximum Tolerable Downtime (F) Security Requirements (F) Contingency Plan (P) Information System Risk Assessment (P) Privacy Impact Assessment (I) Information System Description (P) Systems Development Artifacts: Business Case (F) High-Level Technical Design (P) Requirements Document (P) Project Delegated Project Management Artifacts: Baseline Action Items, Decision Log, Issues List, Review (PBR) and Lessons Learned (P) Project Management Plan (F) Risk Register (P) Security Artifacts and Information: Contingency Plan (I) Information System Risk Assessment (I) Privacy Impact Assessment (I) Information System Description (I) Monitoring Strategy (P/F) Systems Development Artifacts: Project Schedule (B) Release Plan (P) Requirements Document (I) Requirements Requirements Delegated Project Management Artifacts: Analysis and Review (RR) Action Items, Decision Log, Issues List, Design and Lessons Learned (I) Project Schedule (I) Risk Register (I) Security Artifacts and Information: Contingency Plan (I) Information System Risk Assessment (B) Privacy Impact Assessment (I) Information System Description (I) Monitoring Strategy (U)
Table 7. Reviews for a Complexity Level 2 Project Sample Complexity 2 Project – Follow your Project Process Agreement XLC Phase XLC Review Review Type Artifacts Initiation, Concept, and Planning Architecture Review (AR) Governance Project Management Artifacts: N/A Security Artifacts and Information: Privacy Impact Assessment (P) Security Categorization Worksheet (F) Systems Development Artifacts: Enterprise Architecture Analysis Artifacts (P) IT Intake Form (F) Investment Selection Review (ISR) Governance Project Management Artifacts: Project Process Agreement (B) Security Artifacts and Information: Business Risk Assessment (P), including Maximum Tolerable Downtime (F) Security Requirements (F) Contingency Plan (P) Information System Risk Assessment (P) Privacy Impact Assessment (I) Information System Description (P) Systems Development Artifacts: Business Case (F) High-Level Technical Design (P) Requirements Document (P) Project Baseline Review (PBR) Delegated Project Management Artifacts: Action Items, Decision Log, Issues List, and Lessons Learned (P) Project Management Plan (F) Risk Register (P) Security Artifacts and Information: Contingency Plan (I) Information System Risk Assessment (I) Privacy Impact Assessment (I) Information System Description (I) Monitoring Strategy (P/F) Systems Development Artifacts: Project Schedule (B) Release Plan (P) Requirements Document (I) Requirements Analysis and Design Requirements Review (RR) Delegated Project Management Artifacts: Action Items, Decision Log, Issues List, and Lessons Learned (I) Project Schedule (I) Risk Register (I) Security Artifacts and Information: Contingency Plan (I) Information System Risk Assessment (B) Privacy Impact Assessment (I) Information System Description (I) Monitoring Strategy (U)