Cybersecurity Integration Activity YES NO Reference Comments / Remarks Materiel Development Decision (MDD) DoDI 5000.02 Information Systems Security Manager DoDI 8510.01 (ISSM) appointed and qualifications of system security engineer(s) ensured Security Plan initiated DoDI 8510.01; See RMF Knowledge Service for template System categorized (identify potential impact DoDI 8510.01; levels due to the loss of confidentiality, CNSSI 1253 integrity, and availability) to support Initial Capabilities Document (ICD) development ISSM and System Security Engineer (SSE) DoDI 5000.02 assessed cybersecurity risk per criteria in Analysis of Alternatives (AoA) study plan and cybersecurity capability requirements from the ICD Sponsor and Joint Staff developed preferred DoDI 5000.02 cybersecurity risk solutions Chief Engineer (CE), ISSM, User DoDI 8510.01; DoDI Representative (UR), Sponsor, CIO and SSE 5000.02 identified applicable cybersecurity enterprise architectures in the system conceptual design Security control baseline and overlays DoDI 8510.01; selected and tailoring begun CNSSI 1253 CE and SSE ensured that the initial security DoDI 8510.01 controls baseline traces to the preliminary system performance specifications that comprise the preliminary functional baseline Initial Trusted Systems and Networks (TSN) DoDI 5200.44; DoDI Analysis conducted: CE and SSE conducted 5000.02 TSN Analysis focused at mission level, including Criticality Analysis (CA) to identify critical functions, Threat Assessment (TA), Vulnerability Assessment (VA), TSN Risk Assessment, and countermeasure selection Initial Cybersecurity Risk Assessment DoDI 8510.01 completed: CE and ISSM conducted cybersecurity risk assessment using the mission context as described in the ICD with
Cybersecurity Integration Activity YES NO Reference Comments / Remarks Materiel Development Decision (MDD) DoDI 5000.02 Information Systems Security Manager (ISSM) appointed and qualifications of system security engineer(s) ensured DoDI 8510.01 Security Plan initiated DoDI 8510.01; See RMF Knowledge Service for template System categorized (identify potential impact levels due to the loss of confidentiality, integrity, and availability) to support Initial Capabilities Document (ICD) development DoDI 8510.01; CNSSI 1253 ISSM and System Security Engineer (SSE) assessed cybersecurity risk per criteria in Analysis of Alternatives (AoA) study plan and cybersecurity capability requirements from the ICD DoDI 5000.02 Sponsor and Joint Staff developed preferred cybersecurity risk solutions DoDI 5000.02 Chief Engineer (CE), ISSM, User Representative (UR), Sponsor, CIO and SSE identified applicable cybersecurity enterprise architectures in the system conceptual design DoDI 8510.01; DoDI 5000.02 Security control baseline and overlays selected and tailoring begun DoDI 8510.01; CNSSI 1253 CE and SSE ensured that the initial security controls baseline traces to the preliminary system performance specifications that comprise the preliminary functional baseline DoDI 8510.01 Initial Trusted Systems and Networks (TSN) Analysis conducted: CE and SSE conducted TSN Analysis focused at mission level, including Criticality Analysis (CA) to identify critical functions, Threat Assessment (TA), Vulnerability Assessment (VA), TSN Risk Assessment, and countermeasure selection DoDI 5200.44; DoDI 5000.02 Initial Cybersecurity Risk Assessment completed: CE and ISSM conducted cybersecurity risk assessment using the mission context as described in the ICD with DoDI 8510.01
Cybersecurity%20Strategy%20ADDM%20Template%20v%201.0.docx