Friday, July 22, 2005

DITSCAP vs DIACAP

**Update:  DIACAP is being superceded by 8510.10, DoD Risk Management Framework.  We have been calling this DIARMF or Defense Information Assurance Risk Management Framework from 2011 to 2014, because originally that is the government was calling it while they were still writing it.  **

The DIACAP will include Netcentricity, GIG and FISMA concepts. Implementations such as online status of system information assurance and annual reviews will be done in hopes of keeping information assurance visible and current.













































DITSCAP


DIACAP


TARGET


System-Unique Reqirements and Metric (Risk Assessment)


Baseline DOD Controls, Standards, Tests Metrics


Mature knowledge-base Integrates DoD, Component,
Mission Area, Domain, and COI IA Control & Standards


System-Unique IA Architechure


Emerging GIG and DoD Component


Robust Plug-and-Play Enterprise IA Services


Information is Seldom Current


Review NLT Annual


Status driven Online Repository


Automated Certification of IA posture


No Information on Many Systems


Expanded System Boundaries = Greater Coverage


Status driven Online Repository


IA Posture Visible


OVERALL


Slow


Intergrates FISMA




Difficult to Share


Intergrates Netcentricity





0 Comments:

Post a Comment

<< Home