Information How well does the Please consider three aspects RADIO BUTTONS: 5 Exceptional: Information is trustworthy with – application support your as to how the application very high integrity, quality and timeliness. information/data supports the management of Decisions are confidently made based on Label: “5 – management needs? information: (1) the integrity information Value: 5 Exceptional”, and trustworthiness of the data (2) data quality such as 3 Sufficient: Information integrity, quality, – Label: “4 – searches and reporting and timeliness are sufficient; decisions can be Value: 4 Excellent”, accuracy; and (3) whether made from information, but usually require 6 data are available to additional supporting evidence employees or customers Label: “3 – when they need it. Value: 3 Sufficient”, 1 Poor: Information integrity, quality, and – timeliness are poor; no decisions can be based Label: “2 – on information due to corruption and volatility. Value: 2 Tolerable”, 1 Label: Value: “1 – Poor”, Security How well does the Please consider enforcement RADIO BUTTONS: 5 Optimized: All applicable security policies, – application securely of proper access controls, processes, and procedures are strictly privacy issues, and regulatory enforced; security controls do not inhibit protect your Label: “5 – compliance, and how those accessibility, usability, productivity, or information/data? Value: 5 Optimized”, security controls adversely effectiveness affect user accessibility, Label: Value: “4 – Strong”, usability, productivity, and 3 Sufficient: Critical security policies, – 4 effectiveness. processes, and procedures are enforced; some security controls inhibit accessibility, usability, Label: “3 – productivity, or effectiveness; minor security 7 Value: 3 Sufficient”, vulnerabilities are known, but acceptable Label: “2 – 1 Exposed: Security policies, processes, and – Value: 2 Vulnerable”, procedures are not properly enforced; known, critical vulnerabilities exist; any existing security controls significantly inhibit accessibility, Label: “1 – usability, productivity, and effectiveness Value: 1 Exposed”,
6 Information How well does the application support your information/data management needs? Please consider three aspects as to how the application supports the management of information: (1) the integrity and trustworthiness of the data (2) data quality such as searches and reporting accuracy; and (3) whether data are available to employees or customers when they need it. RADIO BUTTONS: Label: “5 – Exceptional”, Value: 5 Label: “4 – Excellent”, Value: 4 Label: “3 – Sufficient”, Value: 3 Label: “2 – Tolerable”, Value: 2 Label: “1 – Poor”, Value: 1 5 – Exceptional: Information is trustworthy with very high integrity, quality and timeliness. Decisions are confidently made based on information 3 – Sufficient: Information integrity, quality, and timeliness are sufficient; decisions can be made from information, but usually require additional supporting evidence 1 – Poor: Information integrity, quality, and timeliness are poor; no decisions can be based on information due to corruption and volatility. 7 Security How well does the application securely protect your information/data? Please consider enforcement of proper access controls, privacy issues, and regulatory compliance, and how those security controls adversely affect user accessibility, usability, productivity, and effectiveness. RADIO BUTTONS: Label: “5 – Optimized”, Value: 5 Label: “4 – Strong”, Value: 4 Label: “3 – Sufficient”, Value: 3 Label: “2 – Vulnerable”, Value: 2 Label: “1 – Exposed”, Value: 1 5 – Optimized: All applicable security policies, processes, and procedures are strictly enforced; security controls do not inhibit accessibility, usability, productivity, or effectiveness 3 – Sufficient: Critical security policies, processes, and procedures are enforced; some security controls inhibit accessibility, usability, productivity, or effectiveness; minor security vulnerabilities are known, but acceptable 1 – Exposed: Security policies, processes, and procedures are not properly enforced; known, critical vulnerabilities exist; any existing security controls significantly inhibit accessibility, usability, productivity, and effectiveness
FY%2018%20Application%20Portfolio%20Management%20Assessment%20and%20Validation%20Instructions.docx