Activity-in-Diagram: Perform ACD Events

CreatorTim Ramey

Description

The ACD assessment team uses methods typical of cybersecurity threat adversaries (as described by system threat documents) to expose vulnerabilities and documents the results in an evaluation report. The CDT includes the DCO team during ACD events if possible, to perform a preliminary assessment of PMR capabilities of the system and system operators and defenders.

Owning Diagram A43: Conduct ACD and Document Results

Input

threat vignette

Output

MBCRA updates

ACD evaluation

Control

RMF and POA&M

ACD Test Plan

ACD test plan updates

Cheif Developmental Tester

cybersecurity controls

Mechanism

Authorization to Operate (ATO)

system envirionment

Cybersecurity DT&E Technical Experts