Activity-in-Diagram: Develop Cybersecurity T&E Strategy

Creator

Description

The cybersecurity T&E strategy documented in the TEMP includes RMF assessment activities and answers to questions for every planned test phase. The strategy should explain how test organizations will carry out the cybersecurity T&E activities, including attack surface characterization, vulnerability identification, and adversarial assessments, in accordance with the cybersecurity T&E six-phase process.

Owning Diagram A1: Phase 1: Understand Cyber Security Requirements

Input

TEMP updates

Mission-Based Cyber Risk Assessment (MBCRA)

Test and Evaulation Master Plan (TEMP)

Output

MBCRA updates

cybersecurity T&E strategy

Control

catalog of cybersecurity requirements

Cheif Developmental Tester

DODIs (various)

JCIDS IDC/CDD/CPD

Mechanism

Lead DT&E Organization

Operational Test Agency