Milestone B Exit Criteria Approved DoDI 5000.02 DoDI 5000.02 Cybersecurity requirements mapped and allocated to the hardware and software design for the system as part of the overall system development process to support test and evaluation planning Attack surface characterized and assessment for cybersecurity planning DoDI 5000.2 (DAG Chapter 9) and performing component and system integration testing Critical Design Review (CDR) entrance criteria met for cybersecurity DoDI 5000.02 (DAG Chapter 4) baseline design and all cybersecurity requirements reflected in the product baseline including the design CDR DoDI 5000.02 TSN analysis updated and focused on system-level functions, DoDI 5200.44 including CA to identify critical functions, TA, VA, TSN Risk DoDI 5000.02 Assessment, and countermeasure selection (in coordination with SCA and AO/AODR) Cybersecurity risk assessment updated (Threat, Vulnerability, DoDI 8510.01 Likelihood, and Impact), including results from the TSN analysis Vulnerability analysis conducted and testing performed to evaluate the DoDI 5000.02 system’s cybersecurity in a mission context realistic threat exploitation techniques DoDI 8510.01 Developmental test and evaluation (DT&E) events conducted to demonstrate system maturity and readiness to begin production and preparedness for operational test and evaluation and/or deployment and sustainment activities; coordinated with SCA; AO/AODR, DT&E, and OT&E staff. Interim Authorization to Test (IATT) issued (If necessary) DoDI 5000.2 (DAG Chapter 9) DT&E assessment prepared as input to Milestone C Decision DoDI 5000.02
Milestone B Exit Criteria Approved DoDI 5000.02 Cybersecurity requirements mapped and allocated to the hardware and software design for the system as part of the overall system development process to support test and evaluation planning DoDI 5000.02 Attack surface characterized and assessment for cybersecurity planning and performing component and system integration testing DoDI 5000.2 (DAG Chapter 9) Critical Design Review (CDR) entrance criteria met for cybersecurity baseline design and all cybersecurity requirements reflected in the product baseline including the design DoDI 5000.02 (DAG Chapter 4) CDR DoDI 5000.02 TSN analysis updated and focused on system-level functions, including CA to identify critical functions, TA, VA, TSN Risk Assessment, and countermeasure selection (in coordination with SCA and AO/AODR) DoDI 5200.44 DoDI 5000.02 Cybersecurity risk assessment updated (Threat, Vulnerability, Likelihood, and Impact), including results from the TSN analysis DoDI 8510.01 Vulnerability analysis conducted and testing performed to evaluate the system’s cybersecurity in a mission context realistic threat exploitation techniques DoDI 5000.02 Developmental test and evaluation (DT&E) events conducted to demonstrate system maturity and readiness to begin production and preparedness for operational test and evaluation and/or deployment and sustainment activities; coordinated with SCA; AO/AODR, DT&E, and OT&E staff. DoDI 8510.01 Interim Authorization to Test (IATT) issued (If necessary) DoDI 5000.2 (DAG Chapter 9) DT&E assessment prepared as input to Milestone C Decision DoDI 5000.02
DONCIOCybersecurityStrategyTemplateandInstructions%209May2016.docx