Activity-in-Diagram: Develop ROE

CreatorTim Ramey

Description

For government ACD events, the PM and ACD assessment team develop and document their ROE [Rules of Engagement] and the scope of the assessment in the test plan before the event. This agreement may involve legal counsel and the CSSP to consider all legal and technical provisions. The ROE will generally provide the assessment team with flexibility during testing (not tied to a specific script) while it still operates within a rule set agreed to by all parties. The team will share its ROE with all parties and will describe its threat portrayal based on its knowledge of designated attack vectors and the information provided by the Program Office.

Owning Diagram A422: Define Process and Test Cases

Input

CONOPS

threat vignette

Output

ACD scope of assessment

ACD ROE

Control

Cheif Developmental Tester

ACD test objectives and metrics

updated tactics and targetting

Mechanism

Cybersecurity DT&E Technical Experts