Arial Internet Service Provider Arial Boundary Protection $ Arial (Guard, Firewall, etc.) Arial Remote Access Protection Arial (Communications Servers, Encryption, etc.) Arial Enclave Boundaries! Arial Local = Arial Computing H Arial Environment Arial Local = Arial Computing H Arial Environment Arial Enclave BoundariesC Arial Arial TSPs) Arial Networks & InfrastructuresH Arial Telecommunications Service Arial Providers ( Arial TSPs) Arial Arial Public Telephone7 Arial Network Arial Private Networks7 Arial Classified Networks Arial Public Network Arial (Internet) Arial Connections to Other Enclaves Arial Classified Enclave0 Arial Private Enclave Arial Public Enclave- Arial Remote$ Arial Users Arial Remote$ Arial Users Arial Arial TSPs) Arial Remote Arial Connections 0 Arial Arial TSPs) Arial Supporting Infrastructures: Arial Arial Detect & Respond6 Arial Arial KMI/2 Arial Arial Facility3 Arial Local = Arial Computing H Arial Environment Arial Remote Arial Users Arial Remote Arial Users Arial Remote Arial Users Arial Hardware and Software Suppliers Arial Arial Insider Arial Close Arial Arial Arial C l a s s e s o f A t t a c k s Arial Passive Arial Active. Arial Distribution0 Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial iatf_1_7_0068 Arial Internet Service Provider Arial Internet Service Provider Arial Boundary Protection $ Arial (Guard, Firewall, etc.) Arial Remote Access Protection Arial (Communications Servers, Encryption, etc.) Arial Enclave Boundaries! Arial Local = Arial Computing H Arial Environment Arial Local = Arial Computing H Arial Environment Arial Enclave BoundariesC Arial Arial TSPs) Arial Arial TSPs) Arial Networks & InfrastructuresH Arial Telecommunications Service Arial Providers ( Arial TSPs) Arial Arial Public Telephone7 Arial Network Arial Private Networks7 Arial Classified Networks Arial Private Networks7 Arial Classified Networks Arial Public Network Arial (Internet) Arial Public Network Arial (Internet) Arial Connections to Other Enclaves Arial Classified Enclave0 Arial Private Enclave Arial Public Enclave- Arial Remote$ Arial Users Arial Remote$ Arial Users Arial Arial TSPs) Arial Arial TSPs) Arial Remote Arial Connections 0 Arial Arial TSPs) Arial Supporting Infrastructures: Arial Arial Detect & Respond6 Arial Arial KMI/2 Arial Arial Facility3 Arial Local = Arial Computing H Arial Environment Arial Remote Arial Users Arial Remote Arial Users Arial Remote Arial Users Arial Hardware and Software Suppliers Arial Arial Insider Arial Close Arial Arial Arial C l a s s e s o f A t t a c k s Arial Passive Arial Active. Arial Distribution0 Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial iatf_1_7_0068
Arial Successful Organization Functions Arial Information Assurance Arial Defense In Depth Strategy Arial Defend the* Arial Network & Arial Infrastructure Arial Defend the* Arial Computing Arial Environment Arial Supporting' Arial Infrastructures Arial Defend the* Arial Enclave Arial Boundary* Arial Detect &* Arial Respond Arial KMI/* Arial Arial Overlapping Approaches & Layers of Protection Arial T e c h n o l o g y Arial T e c h n o l o g y Arial Operations[ Arial Operations[ Arial P e o p l e Arial P e o p l e Arial People7 Arial Executing Arial OperationsA Arial Supported by7 Arial Technology3 Arial iatf_1_8_0069 Arial Successful Organization Functions Arial Information Assurance Arial Defense In Depth StrategyrT Arial Defend the* Arial Network & Arial Infrastructure Arial Defend the* Arial Computinga* Arial Environment Arial Supporting' Arial Infrastructures Arial Defend the* Arial Enclave Arial Boundary* Arial Detect &* Arial Respond Arial KMI/* Arial Arial Overlapping Approaches & Layers of Protection Arial T e c h n o l o g y Arial T e c h n o l o g y Arial Operations[ Arial Operations[ Arial P e o p l e Arial P e o p l e Arial T e c h n o l o g y Arial T e c h n o l o g y Arial Operations[ Arial Operations[ Arial P e o p l e Arial P e o p l e Arial People7 Arial Executing Arial OperationsA Arial Supported by7 Arial Technology3 Arial iatf_1_8_0069
Arial Remote$ Arial Users Arial Private Network Arial Internet Service Provider Arial Telecommunications Service Providers (TSP)$ Arial Remote$ Arial Users Arial Boundary Protection (Guard, Firewall, etc.) Arial Remote Access Protection (Communications Serve, $ Arial Encryptor Arial , etc.) Arial Department of Energy Sites< Arial Arial TSPs$ Arial Remote$ Arial Users Arial Arial TSPs$ Arial Arial TSPs$ Arial Connections to Other Enclaves & Sites Arial Public Telephone Arial Network Arial ESNet Arial Arial Arial WAN)A Arial VPN Tunnel- Arial Public Network Arial (Internet) Arial Public Site Arial (Green Network) Arial SBU/No Foreign- Arial (Yellow Network) Arial Site DMZ- Arial Classified Site Arial (Red Network) Arial Classified0 Arial Enclave Arial iatf_2_2_1_0130 Arial Remote$ Arial Users Arial Private Network Arial Private Network Arial Internet Service Provider Arial Internet Service Provider Arial Telecommunications Service Providers (TSP)$ Arial Remote$ Arial Users Arial Boundary Protection (Guard, Firewall, etc.) Arial Remote Access Protection (Communications Serve, $ Arial Encryptor Arial , etc.) Arial Boundary Protection (Guard, Firewall, etc.) Arial Remote Access Protection (Communications Serve, $ Arial Encryptor Arial , etc.) Arial Department of Energy Sites< Arial Arial TSPs$ Arial Arial TSPs$ Arial Remote$ Arial Users Arial Arial TSPs$ Arial Arial TSPs$ Arial Arial TSPs$ Arial Arial TSPs$ Arial Connections to Other Enclaves & Sites Arial Public Telephone Arial Network Arial Public Telephone Arial Network Arial ESNet Arial Arial Arial WAN)A Arial ESNet Arial Arial Arial WAN)A Arial VPN Tunnel- Arial Public Network Arial (Internet) Arial Public Network Arial (Internet) Arial Public Site Arial (Green Network) Arial SBU/No Foreign- Arial (Yellow Network) Arial Site DMZ- Arial Classified Site Arial (Red Network) Arial Classified0 Arial Enclave Arial iatf_2_2_1_0130
Arial Enclave Boundaries7 Arial Networks & Infrastructures< Arial Telecommunications) Arial Service Providers (TSP) Arial Private Networks- Arial NIPRNET Arial Network Arial Connections to Other Enclaves Arial Top Secret4 Arial Enclave Arial Unclassified6 Arial (Sensitive) Enclave Arial Public Enclave, Arial DMZY< Arial Secret7 Arial Enclave Arial Coalition Arial Enclave Arial SIPRNET Arial Secret Network- Arial JWICS Arial TS Network Arial Boundary Protection $ Arial (Guard, Firewall, etc.) Arial Remote Access Protection Arial (Communications Server, Encryption, etc.) Arial Remote$ Arial Users Arial Public Telephone Arial Network Arial Public Network Arial (Internet) Arial Internet Service Provider Arial Facility3 Arial Remote$ Arial Users Arial Arial TSPs) Arial Remote$ Arial Users Arial Arial TSPs) Arial Arial TSPs) Arial Remote$ Arial Userso$ Arial Arial NIPRNET Arial Arial Internet Gateway Arial Arial Arial TSPs) Arial iatf_2_2_2_0131 Arial Enclave Boundaries7 Arial Networks & Infrastructures< Arial Telecommunications) Arial Service Providers (TSP) Arial Private Networks- Arial NIPRNET Arial Network Arial Connections to Other Enclaves Arial Top Secret4 Arial Enclave Arial Unclassified6 Arial (Sensitive) Enclave Arial Public Enclave, Arial Arial Public Enclave, Arial Arial Secret7 Arial Enclave Arial Coalition Arial Enclave Arial SIPRNET Arial Secret Network- Arial JWICS Arial TS Network Arial Boundary Protection $ Arial (Guard, Firewall, etc.) Arial Remote Access Protection c$ Arial (Communications Server, Encryption, etc.) Arial Boundary Protection $ Arial (Guard, Firewall, etc.) Arial Remote Access Protection Arial (Communications Server, Encryption, etc.) Arial Remote$ Arial Users Arial Public Telephone Arial Network Arial Public Network Arial (Internet) Arial Internet Service Provider Arial Facility3 Arial Remote$ Arial Users Arial Arial TSPs) Arial Arial TSPs) Arial Remote$ Arial Users Arial Arial TSPs) Arial Arial TSPs) Arial Arial TSPs) Arial Arial TSPs) Arial Remote$ Arial Users Arial Arial NIPRNET Arial Arial Internet Gateway Arial Arial Arial TSPs) Arial Arial TSPs) Arial iatf_2_2_2_0131
Arial Robust and Integrated Set ofH Arial Information Assurance Measures and Actions Arial Information Assurance Arial Successful Mission ExecutionC Arial OperationsN Arial PeopleC Arial Technology= Arial Operations[ Arial PeopleN Arial TechnologyG Arial iatf_2_4_2004 Arial Robust and Integrated Set ofH Arial Information Assurance Measures and Actions Arial Information Assurance Arial Successful Mission ExecutionC Arial Information Assurance Arial Successful Mission ExecutionC Arial OperationsN Arial PeopleC Arial Technology= Arial OperationsN Arial PeopleC Arial Technology= Arial Operations[ Arial PeopleN Arial TechnologyG Arial Operations[ Arial PeopleN Arial TechnologyG Arial iatf_2_4_2004
Arial Hire Good People Arial Arial Train and Reward Them Well4 Arial Penalize Unauthorized Behavior7 Arial Arial Policies & Proceduresd- Arial Arial Training & Awareness( Arial Arial System Security . Arial Administration. Arial Arial Physical Security Arial Arial Personnel Security- Arial Arial Facilities Arial Countermeasuresa0 Arial Information Assurance Arial Successful Mission ExecutionC Arial OperationsN Arial PeopleC Arial Technology= Arial PeopleN Arial Operations[ Arial TechnologyG Arial iatf_2_5_2005 Arial Hire Good People Arial Arial Train and Reward Them Well4 Arial Penalize Unauthorized Behavior7 Arial Arial Policies & Procedures Arial Arial Training & Awareness( Arial Arial System Security . Arial Administration. Arial Arial Physical Security Arial Arial Personnel Security- Arial Arial Facilities Arial Countermeasures Arial Arial Policies & Procedures Arial Arial Training & Awareness( Arial Arial System Security . Arial Administration. Arial Arial Physical Security Arial Arial Personnel Security- Arial Arial Facilities Arial Countermeasures Arial Information Assurance Arial Successful Mission ExecutionC Arial Information Assurance Arial Successful Mission ExecutionC Arial OperationsN Arial PeopleC Arial Technology= Arial OperationsN Arial PeopleC Arial Technology= Arial PeopleN Arial Operations[ Arial TechnologyG Arial Operations[ Arial TechnologyG Arial iatf_2_5_2005
Arial Arial IA Architecture Arial Arial IA Criteria (security, Arial interoperability, PKI) Arial Arial Acquisition/Integration of Arial Evaluated Products- Arial Arial System Risk Assessment. Arial Application of Evaluated Products and Solutions Arial Support of a Layered Defense Strategya7 Arial Information Assurancea Arial Successful Mission ExecutionC Arial OperationsN Arial PeopleC Arial Technology= Arial PeopleN Arial Operations[ Arial TechnologyG Arial iatf_2_6_2006 Arial Arial IA Architecture Arial Arial IA Criteria (security, Arial interoperability, PKI) Arial Arial Acquisition/Integration of Arial Evaluated Products- Arial Arial System Risk Assessment. Arial Arial IA Architecture Arial Arial IA Criteria (security, Arial interoperability, PKI) Arial Arial Acquisition/Integration of Arial Evaluated Products- Arial Arial System Risk Assessment. Arial Application of Evaluated Products and Solutions Arial Support of a Layered Defense Strategy Arial Information Assurance Arial Successful Mission ExecutionC Arial Information Assurance Arial Successful Mission ExecutionC Arial OperationsN Arial PeopleC Arial Technology= Arial OperationsN Arial PeopleC Arial Technology= Arial PeopleN Arial Operations[ Arial TechnologyG Arial iatf_2_6_2006
Arial Enforce Security Policy 7 Arial Arial Respond Quickly to Intrusions Arial Restore Critical Services Arial Information Assurancea Arial Successful Mission ExecutionC Arial Information Assurance Arial Successful Mission ExecutionC Arial OperationsN Arial PeopleC Arial Technology= Arial OperationsN Arial PeopleC Arial Technology= Arial PeopleN Arial Operations[ Arial TechnologyG Arial Arial Security Policy Arial Arial Certification and Arial Accreditation Arial Arial Security Mgmt Arial Arial Key Management0 Arial Arial Readiness Arial Assessments Arial Arial Arial Arial Arial Recovery &0 Arial Reconstitution0 Arial Arial Security Policy Arial Arial Certification and Arial Accreditation Arial Arial Security Mgmt Arial Arial Key Management0 Arial Arial Readiness Arial Assessments Arial Arial Arial Arial Arial Recovery &0 Arial Reconstitution0 Arial iatf_2_7_2007
Arial Information Assurance Arial Successful Mission ExecutionC Arial OperationsN Arial PeopleC Arial Technology= Arial Operations[ Arial PeopleN Arial TechnologyG Arial Defense in Depth Focus AreasH Arial Defend the0 Arial Network & Arial Infrastructure Arial Defend the0 Arial Enclave Arial Boundary0 Arial Defend the0 Arial Computing Arial Environment Arial Supporting- Arial Infrastructures Arial Detect &* Arial Respond Arial KMI/PKI Arial iatf_2_8_2008 Arial Information Assurance Arial Successful Mission ExecutionC Arial Information Assurance Arial Successful Mission ExecutionC Arial OperationsN Arial PeopleC Arial Technology= Arial OperationsN Arial PeopleC Arial Technology= Arial Operations[ Arial PeopleN Arial TechnologyG Arial Operations[ Arial PeopleN Arial TechnologyG Arial Defense in Depth Focus AreasH Arial Defend the0 Arial Network & Arial Infrastructure Arial Defend the0 Arial Enclave Arial Boundary0 Arial Defend the0 Arial Computing Arial Environment Arial Supporting- Arial Infrastructures Arial Detect &* Arial Respond Arial KMI/PKI Arial iatf_2_8_2008
Arial NEEDS Arial System4 Arial External2 Arial System2 Arial External2 Arial System2 Arial External2 Arial System2 Arial Solution Set2 Arial iatf_3_3_0080 Arial NEEDS Arial System4 Arial External2 Arial System2 Arial External2 Arial System2 Arial External2 Arial System2 Arial Solution Set2 Arial NEEDS Arial System4 Arial External2 Arial System2 Arial External2 Arial System2 Arial External2 Arial System2 Arial Solution Set2 Arial iatf_3_3_0080
Arial Target System Arial (all system Arial functions) Arial External2 Arial System2 Arial System Interfaces Arial External2 Arial System2 Arial iatf_3_4a_3004a Arial Target System Arial (all system Arial functions) Arial External2 Arial System2 Arial System Interfaces Arial External2 Arial System2 Arial iatf_3_4a_3004a
Arial External2 Arial System2 Arial Internal Arial Interfaces Arial System Interfaces Arial System. Arial Design Elements Arial Components6 Arial System elements Arial iatf_3_4b_3004b Arial External2 Arial System2 Arial Internal Arial Interfaces Arial System Interfaces Arial System. Arial System. Arial Design Elements Arial Components6 Arial System elements Arial iatf_3_4b_3004b
Arial Process Input Arial Arial Customer Arial Needs/Objectives/Requirements Arial Arial Missions) Arial Arial Measures of Effectiveness Arial Arial Constraints Arial Arial Technology Base Arial Arial Output Requirements From Prior Arial Development Effort$ Arial Arial Program Decision Requirements Arial Arial Requirements Applied Through Arial Specifications and Standards! Arial Process Output! Arial Arial Development Level Dependent Arial Arial Decision Database Arial Arial System Configuration Item ! Arial Architecture! Arial Arial Specifications and Arial Baselinese! Arial Related Terms:$ Arial Customer$ Arial Arial Organizations Responsible for Primary Functions Arial Primary Functions Arial Arial Development, Production/Construction, Verification, $ Arial Deployment, Operations, Support, Training, Disposal Arial System Elements Arial Arial Hardware, Software, Personnel, Facilities, Data, Arial Material, Services, Techniques) Arial Synthesis Arial Arial Transform Architectures (Functional to Physical) Arial Arial Define Alternate System Concepts, Configuration $ Arial Items and System Elements Arial Arial Select Preferred Product and Process Solutions! Arial Arial Define/Refine Physical Interfaces (Internal/External) Arial Synthesis Arial Arial Transform Architectures (Functional to Physical) Arial Arial Define Alternate System Concepts, Configuration $ Arial Items and System Elements Arial Arial Select Preferred Product and Process Solutions! Arial Arial Define/Refine Physical Interfaces (Internal/External) Arial Requirements Analysis Arial Arial Analyze Missions and Environments Arial Arial Identify Functional Requirements Arial Arial Define/Refine Performance and Design Arial Constraint Requirements Arial Requirements Analysis Arial Arial Analyze Missions and Environments Arial Arial Identify Functional Requirements Arial Arial Define/Refine Performance and Design Arial Constraint Requirements Arial Arial Trade Arial Arial Off Studies Arial Arial Effectiveness Analysis! Arial Arial Risk Management Arial Arial Configuration Management$ Arial Arial Interface Management Arial Arial Data Management Arial Arial Performance Measurementt! Arial Arial SEMS! Arial Arial Arial Arial Technical Reviews Arial System Analysis ! Arial and Control Arial (Balance) Arial System Analysis ! Arial and Control Arial (Balance) Arial Requirements Loop Arial Design Loop Arial Verification! Arial Functional Analysis/Allocation Arial Arial Decompose to Lower$ Arial Arial level Functions Arial Arial Allocate Performance and Other Limiting ! Arial Requirements to All Functional Levels Arial Arial Define/Refine Functional Interfaces (Internal/External) Arial Arial Define/Refine/Integrate Functional Architecture Arial Functional Analysis/Allocation Arial Arial Decompose to Lower$ Arial Arial level Functions Arial Arial Allocate Performance and Other Limiting ! Arial Requirements to All Functional Levels Arial Arial Define/Refine Functional Interfaces (Internal/External) Arial Arial Define/Refine/Integrate Functional Architecture Arial iatf_3_5_3003 Arial Process Input Arial Arial Customer Arial Needs/Objectives/Requirements Arial Arial Missions) Arial Arial Measures of Effectiveness Arial Arial Constraints Arial Arial Technology Base Arial Arial Output Requirements From Prior Arial Development Effort$ Arial Arial Program Decision Requirements Arial Arial Requirements Applied Through Arial Specifications and Standards! Arial Process Output! Arial Arial Development Level Dependent Arial Arial Decision Database Arial Arial System Configuration Item ! Arial Architecture! Arial Arial Specifications and Arial Baselines Arial Related Terms:$ Arial Customer$ Arial Arial Organizations Responsible for Primary Functions Arial Primary Functions Arial Arial Development, Production/Construction, Verification, $ Arial Deployment, Operations, Support, Training, Disposal Arial System Elements Arial Arial Hardware, Software, Personnel, Facilities, Data, Arial Material, Services, Techniques) Arial Synthesis Arial Arial Transform Architectures (Functional to Physical) Arial Arial Define Alternate System Concepts, Configuration $ Arial Items and System Elements Arial Arial Select Preferred Product and Process Solutions! Arial Arial Define/Refine Physical Interfaces (Internal/External) Arial Synthesis Arial Arial Transform Architectures (Functional to Physical) Arial Arial Define Alternate System Concepts, Configuration $ Arial Items and System Elements Arial Arial Select Preferred Product and Process Solutions! Arial Arial Define/Refine Physical Interfaces (Internal/External) Arial Requirements Analysis Arial Arial Analyze Missions and Environments Arial Arial Identify Functional Requirements Arial Arial Define/Refine Performance and Design Arial Constraint Requirements Arial Requirements Analysis Arial Arial Analyze Missions and Environments Arial Arial Identify Functional Requirements Arial Arial Define/Refine Performance and Design Arial Constraint Requirements Arial Arial Trade Arial Arial Off Studiesn' Arial Arial Effectiveness Analysis! Arial Arial Risk Management Arial Arial Configuration Management$ Arial Arial Interface Management Arial Arial Data Management Arial Arial Performance Measurement Arial Arial SEMS! Arial Arial Arial Arial Technical Reviews Arial System Analysis ! Arial and Control Arial (Balance) Arial System Analysis ! Arial and Control Arial (Balance) Arial Requirements Loop Arial Design Loop Arial Verification! Arial Functional Analysis/Allocation Arial Arial Decompose to Lower$ Arial Arial level Functions Arial Arial Allocate Performance and Other Limiting ! Arial Requirements to All Functional Levels Arial Arial Define/Refine Functional Interfaces (Internal/External) Arial Arial Define/Refine/Integrate Functional Architecture Arial Functional Analysis/Allocation Arial Arial Decompose to Lower$ Arial Arial level Functions Arial Arial Allocate Performance and Other Limiting ! Arial Requirements to All Functional Levels Arial Arial Define/Refine Functional Interfaces (Internal/External) Arial Arial Define/Refine/Integrate Functional Architecture Arial iatf_3_5_3003
Arial Requirements Trade* Arial Studies and Arial Assessments Arial Functional Trade# Arial Studies and Arial Assessments Arial Design Trade* Arial Studies and Arial Assessments Arial Requirements Baseline Arial Validated Requirements Baseline Arial Functional Architecture Arial Verified Functional Architecture' Arial Physical Architecture ' Arial Verified Physical Architecture' Arial Requirements* Arial Analysis' Arial Requirements* Arial Verification' Arial Functional# Arial Analysis' Arial Functional# Arial Verification' Arial Synthesis Arial Design* Arial Verification' Arial Control Arial Decomposition and Arial Requirement Allocation* Arial Alternatives' Arial Process Inputs' Arial Process Outputs Arial Design Solution Arial Requirements and* Arial Alternatives' Arial Decomposition/Allocation* Arial Trade Arial Arial Offs and Impacts- Arial Design Solutiona* Arial Trade Arial Arial Offs and Impacts- Arial Requirement Arial Trade Arial Arial Offs and Impacts- Arial Requirement and Arial Constraint Conflicts* Arial System( Arial Analysis' Arial iatf_3_6_3006 Arial Requirements Trade* Arial Studies anda' Arial Assessments Arial Functional Trade# Arial Studies and Arial Assessments Arial Design Trade* Arial Studies and Arial Assessments Arial Requirements Trade* Arial Studies andh' Arial Assessments Arial Functional Trade# Arial Studies and Arial Assessments Arial Design Trade* Arial Studies and Arial Assessments Arial Requirements Baseline Arial Validated Requirements Baseline Arial Functional Architecture Arial Verified Functional Architecture' Arial Physical Architecture Arial Verified Physical Architecture' Arial Requirements* Arial Analysis' Arial Requirements* Arial Verification' Arial Functional# Arial Analysis' Arial Functional# Arial Verification' Arial Synthesis Arial Design* Arial Verification' Arial Requirements Baseline Arial Validated Requirements Baseline Arial Functional Architecture Arial Verified Functional Architecture' Arial Physical Architecture Arial Verified Physical Architecture' Arial Requirements Baseline Arial Validated Requirements Baseline Arial Functional Architecture Arial Verified Functional Architecture' Arial Physical Architecture Arial Verified Physical Architecture' Arial Requirements* Arial Analysis' Arial Requirements* Arial Verification' Arial Functional# Arial Analysis' Arial Functional# Arial Verification' Arial Synthesis Arial Design* Arial Verification' Arial Control Arial Decomposition and Arial Requirement Allocation* Arial Alternatives' Arial Process Inputs' Arial Process Outputs Arial Design Solution Arial Requirements and* Arial Alternatives' Arial Decomposition/Allocation* Arial Trade Arial Arial Offs and Impacts- Arial Design Solution Arial Trade Arial Arial Offs and Impacts- Arial Requirement Arial Trade Arial Arial Offs and Impacts- Arial Requirement and Arial Constraint Conflicts* Arial System( Arial Analysis' Arial iatf_3_6_3006
Arial Development Process Arial SE / ISSE Process Arial Assess Effectiveness2 Arial Certification & Arial Accreditation Arial Risk Assessment Arial System Implementation Arial Arial System Documentation4 Arial Certification Documentation/6 Arial Recommendations Arial Arial Accreditation Decision5 Arial Evidence &2 Arial Documentation Arial Feedback. Arial Under the ISSE Assess Effectiveness Arial there is a continuous risk assessment being performed Arial iatf_3_7_3007 Arial Development Process Arial SE / ISSE Process Arial Assess Effectiveness2 Arial Certification & Arial Accreditation Arial Risk Assessment Arial System Implementation Arial Arial System Documentation4 Arial Certification Documentation/6 Arial Recommendations Arial Arial Accreditation Decision5 Arial Evidence &2 Arial Documentation Arial Feedback. Arial Under the ISSE Assess Effectiveness Arial there is a continuous risk assessment being performed Arial Development Process Arial SE / ISSE Process Arial Assess Effectiveness2 Arial Development Process Arial SE / ISSE Process Arial Assess Effectiveness2 Arial Certification & Arial Accreditation Arial Risk Assessment Arial Certification & Arial Accreditation Arial Risk Assessment Arial System Implementation Arial Arial System Documentation4 Arial Certification Documentation/6 Arial Recommendations Arial Arial Accreditation Decision5 Arial Evidence &2 Arial Documentation Arial Feedback. Arial Under the ISSE Assess Effectiveness Arial there is a continuous risk assessment being performed Arial iatf_3_7_3007
Arial Vendor7 Arial Environment Arial Black Arial External7 Arial Network Arial Local Subscriber3 Arial Equipment Arial Local Subscriber3 Arial Equipment Arial Remote< Arial OperatorA Arial Backbone< Arial Transport Arial Device< Arial Device< Arial Device< Arial Device< Arial Device< Arial Device< Arial Black Arial Black Arial Black Arial Black Arial Black Arial Black Arial Black Arial Backbone< Arial Arial Black Arial Critical Security Requirement Areas Arial 1. Network to Network Communication Arial 2. Device to Device Communication Arial 3. Device Management and Maintenance. Arial 4. User Data Interface. Arial 5. Remote Operator to Arial Arial Communication Arial Arial Arial to Device Communication Arial Arial Arial Enclave Arial 8. Vendor Deliveries and Maintenance. Arial 9. Vendor Design and Manufacture. Arial iatf_5_1_1_0011 Arial Vendor7 Arial Environment Arial Black Arial Vendor7 Arial Environment Arial Black Arial External7 Arial Network Arial External7 Arial Network Arial Local Subscriber3 Arial Equipment Arial Local Subscriber3 Arial Equipment Arial Remote< Arial OperatorA Arial Backbone< Arial Transport Arial Device< Arial Device< Arial Device< Arial Device< Arial Device< Arial Device< Arial Black Arial Black Arial Black Arial Black Arial Black Arial Black Arial Black Arial Backbone< Arial Arial Black Arial Critical Security Requirement Areas Arial 1. Network to Network Communication Arial 2. Device to Device Communication Arial 3. Device Management and Maintenance. Arial 4. User Data Interface. Arial 5. Remote Operator to Arial Arial Communication Arial Arial Arial to Device Communication Arial Arial Arial Enclave Arial 8. Vendor Deliveries and Maintenance. Arial 9. Vendor Design and Manufacture. Arial Critical Security Requirement Areas Arial 1. Network to Network Communication Arial 2. Device to Device Communication Arial 3. Device Management and Maintenance. Arial 4. User Data Interface. Arial 5. Remote Operator to Arial Arial Communication Arial Arial Arial to Device Communication Arial Arial Arial Enclave Arial 8. Vendor Deliveries and Maintenance. Arial 9. Vendor Design and Manufacture. Arial iatf_5_1_1_0011
Arial Ground4 Arial Arial Intelligent Arial Network Arial Infrastructure Arial Packet7 Arial Networks< Arial TCP/IP/ATM4 Arial PTSN7 Arial ISDN Arial Arial Arial Arial Arial Arial PTSN7 Arial ISDN Arial Wired Arial Communications< Arial Infrastructure Arial LEO/% Arial Arial Arial Cellular0 Arial Communications0 Arial lines are Dual Arial Arial Talk/Data Arial Arial Control Arial Paging- Arial Arial One Way Arial Arial Two Way Arial Wireless@ Arial Arial Wireless@ Arial Local Loop% Arial Arial Arial iatf_5_2_1_0005 Arial Ground4 Arial Arial Intelligent Arial Network Arial Infrastructure Arial Packet7 Arial Networks< Arial TCP/IP/ATM4 Arial PTSN7 Arial ISDN Arial Arial Arial Arial Arial Arial Ground4 Arial Arial Intelligent Arial Network Arial Infrastructure Arial Intelligent Arial Network Arial Infrastructure Arial Packet7 Arial Networks< Arial TCP/IP/ATM4 Arial Packet7 Arial Networks< Arial TCP/IP/ATM4 Arial PTSN7 Arial ISDN Arial PTSN7 Arial ISDN Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial PTSN7 Arial ISDN Arial PTSN7 Arial ISDN Arial Wired Arial Communications< Arial Infrastructure Arial LEO/% Arial Arial Arial Cellular0 Arial Communications0 Arial lines are Dual Arial Arial Talk/Data Arial Arial Control Arial Paging- Arial Arial One Way Arial Arial Two Way Arial Wireless@ Arial Arial Wireless@ Arial Local Loop% Arial Arial Arial iatf_5_2_1_0005
Arial PSTNC Arial Arial Internet Arial Alternate Arial Cellular0 Arial System. Arial Cellular0 Arial User0 Arial Wired Arial Telco Arial User0 Arial Arial Arial Arial Arial Arial Base< Arial Station Arial MobileG Arial Telephone Arial Switching Arial Center< Arial Separate2 Arial Control Arial and Talk* Arial Channels6 Arial Cellular Provider Infrastructure< Arial Cellular6 Arial User6 Arial iatf_5_2_2_0006 Arial PSTNC Arial Arial PSTNC Arial Arial Internet Arial Internet Arial Alternate Arial Cellular0 Arial System. Arial Alternate Arial Cellular0 Arial System. Arial Cellular0 Arial User0 Arial Wired Arial Telco Arial User0 Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Base< Arial Station Arial MobileG Arial Telephone Arial Switching Arial Center< Arial Separate2 Arial Control Arial and Talk* Arial Channels6 Arial Cellular Provider Infrastructure< Arial Cellular6 Arial User6 Arial iatf_5_2_2_0006
Arial Ground4 Arial Arial Ground4 Arial Arial PSTNC Arial Arial Cellular* Arial Arial Internet Arial Satellite Arial Crosslinks0 Arial Separate' Arial Talk and# Arial Channel Arial Contracts Arial Wired Arial User0 Arial LEO/# Arial Arial Arial LEO/# Arial Arial Arial iatf_5_2_3_0007 Arial Ground4 Arial Arial Ground4 Arial Arial PSTNC Arial Arial Cellular* Arial Arial Internet Arial Satellite Arial Crosslinks0 Arial Separate' Arial Talk and# Arial Channel Arial Contracts Arial Wired Arial User0 Arial LEO/# Arial Arial Arial LEO/# Arial Arial Arial Ground4 Arial Arial Ground4 Arial Arial PSTNC Arial Arial PSTNC Arial Arial Cellular* Arial Arial Internet Arial Cellular* Arial Arial Internet Arial Satellite Arial Crosslinks0 Arial Separate' Arial Talk and# Arial Channel Arial Contracts Arial Wired Arial User0 Arial LEO/# Arial Arial Arial LEO/# Arial Arial Arial iatf_5_2_3_0007
D^DvD^ O}O}O wHwHvKtL L L k?k?jAiB,B,B*B*@*@ mGmEiEiGmG System D^DvD^& O}O}O wHwHvKtL L L k?k?jAiB,B,B*B*@*@& mGmEiEiGmG& Arial WirelessG Arial Modem Arial WirelessG Arial Modem Arial Arial NETWORK TYPE: Arial Arial Internet Arial Arial Intranet Arial Arial Arial Wired LAN Arial WirelessG Arial Arial PC Cards2 Arial Short Arial Range Arial Enclave Arial Wired LAN Arial iatf_5_2_4_0008 D^DvD^ O}O}O wHwHvKtL L L k?k?jAiB,B,B*B*@*@ mGmEiEiGmG System D^DvD^& O}O}O wHwHvKtL L L k?k?jAiB,B,B*B*@*@& mGmEiEiGmG& Arial WirelessG Arial Modem Arial WirelessG Arial Modem8? Arial Arial NETWORK TYPE: Arial Arial Internet Arial Arial Intranet Arial Arial Arial NETWORK TYPE: Arial Arial Internet Arial Arial Intranet Arial Arial Arial Wired LAN Arial WirelessG Arial Arial PC Cards2 Arial Short Arial Range Arial Enclave Arial Wired LAN Arial iatf_5_2_4_0008
Arial Ground: Arial Arial XMTR2 Arial Service Arial Provider2 Arial Service Provider= Arial Infrastructure Arial PSTN7 Arial Arial Arial NETWORK Arial User< Arial Arial Arial Arial Arial User< Arial iatf_5_2_5_0009 Arial Ground: Arial Arial XMTR2 Arial Service Arial Provider2 Arial Service Provider= Arial Infrastructure Arial PSTN7 Arial Arial Arial NETWORK Arial User< Arial Arial Arial Arial Arial User< Arial Ground: Arial Arial XMTR2 Arial Service Arial Provider2 Arial Service Provider= Arial Infrastructure Arial PSTN7 Arial Arial PSTN7 Arial Arial Arial NETWORK Arial Arial NETWORK Arial User< Arial Arial Arial Arial Arial Arial Arial Arial Arial User< Arial iatf_5_2_5_0009
G@G@GBHCIDJELC G@G@GBHCIDJELD &7f7f6i5m4p1s.u+w(x$x$x x T S$S$S(S+T.V1X4[5^6b7f7f &f&f%g$g$g#g"f"f#d$d$d%d&f&f "o"o#n$m$m%n&o&o%p$q$q#p"o"o )m)m)l)k)k*j,k,k,l,m,m*n)m)m -g-g,g+f+f,d-d-d/d/f/f/g-g-g System G@G@GBHCIDJELC G@G@GBHCIDJELD 7f7f6i5m4p1s.u+w(x$x$x x T S$S$S(S+T.V1X4[5^6b7f7f& &f&f%g$g$g#g"f"f#d$d$d%d&f&fV &\&\%^$^$^#^"\"\#[$Z$Z%[&\&\V "o"o#n$m$m%n&o&o%p$q$q#p"o"oV )m)m)l)k)k*j,k,k,l,m,m*n)m)mV -g-g,g+f+f,d-d-d/d/f/f/g-g-gV G@G@GBHCIDJELC G@G@GBHCIDJELD &7f7f6i5m4p1s.u+w(x$x$x x T S$S$S(S+T.V1X4[5^6b7f7f &f&f%g$g$g#g"f"f#d$d$d%d&f&f "o"o#n$m$m%n&o&o%p$q$q#p"o"o )m)m)l)k)k*j,k,k,l,m,m*n)m)m -g-g,g+f+f,d-d-d/d/f/f/g-g-g System G@G@GBHCIDJELC G@G@GBHCIDJELD 7f7f6i5m4p1s.u+w(x$x$x x T S$S$S(S+T.V1X4[5^6b7f7f& &f&f%g$g$g#g"f"f#d$d$d%d&f&fV &\&\%^$^$^#^"\"\#[$Z$Z%[&\&\V "o"o#n$m$m%n&o&o%p$q$q#p"o"oV )m)m)l)k)k*j,k,k,l,m,m*n)m)mV -g-g,g+f+f,d-d-d/d/f/f/g-g-gV Arial Arial Arial Arial Arial Arial Arial Arial Arial PSTN7 Arial Arial User Owned Local Structure0 Arial Wireless@ Arial Arial Local Enclave Arial (e.g. Office) Arial Cordless0 Arial Phone Arial Provider Owned Infrastructure Arial WM = Wireless Modem Arial Arial Neighborhood Arial Enclave Arial iatf_5_2_6_0010 G@G@GBHCIDJELC G@G@GBHCIDJELD &7f7f6i5m4p1s.u+w(x$x$x x T S$S$S(S+T.V1X4[5^6b7f7f &f&f%g$g$g#g"f"f#d$d$d%d&f&f "o"o#n$m$m%n&o&o%p$q$q#p"o"o )m)m)l)k)k*j,k,k,l,m,m*n)m)m -g-g,g+f+f,d-d-d/d/f/f/g-g-g System G@G@GBHCIDJELC G@G@GBHCIDJELD 7f7f6i5m4p1s.u+w(x$x$x x T S$S$S(S+T.V1X4[5^6b7f7f& &f&f%g$g$g#g"f"f#d$d$d%d&f&fV &\&\%^$^$^#^"\"\#[$Z$Z%[&\&\V "o"o#n$m$m%n&o&o%p$q$q#p"o"oV )m)m)l)k)k*j,k,k,l,m,m*n)m)mV -g-g,g+f+f,d-d-d/d/f/f/g-g-gV G@G@GBHCIDJELC G@G@GBHCIDJELD &7f7f6i5m4p1s.u+w(x$x$x x T S$S$S(S+T.V1X4[5^6b7f7f &f&f%g$g$g#g"f"f#d$d$d%d&f&f "o"o#n$m$m%n&o&o%p$q$q#p"o"o )m)m)l)k)k*j,k,k,l,m,m*n)m)m -g-g,g+f+f,d-d-d/d/f/f/g-g-g System G@G@GBHCIDJELC G@G@GBHCIDJELD 7f7f6i5m4p1s.u+w(x$x$x x T S$S$S(S+T.V1X4[5^6b7f7f& &f&f%g$g$g#g"f"f#d$d$d%d&f&fV &\&\%^$^$^#^"\"\#[$Z$Z%[&\&\V "o"o#n$m$m%n&o&o%p$q$q#p"o"oV )m)m)l)k)k*j,k,k,l,m,m*n)m)mV -g-g,g+f+f,d-d-d/d/f/f/g-g-gV Arial Arial Arial Arial Arial Arial Arial Arial Arial PSTN7 Arial Arial User Owned Local Structure0 Arial Wireless@ Arial Arial Local Enclave Arial (e.g. Office) Arial Cordless0 Arial Phone Arial Provider Owned Infrastructure Arial WM = Wireless Modem Arial Arial Neighborhood Arial Enclave G@G@GBHCIDJELC G@G@GBHCIDJELD &7f7f6i5m4p1s.u+w(x$x$x x T S$S$S(S+T.V1X4[5^6b7f7f &f&f%g$g$g#g"f"f#d$d$d%d&f&f "o"o#n$m$m%n&o&o%p$q$q#p"o"o )m)m)l)k)k*j,k,k,l,m,m*n)m)m -g-g,g+f+f,d-d-d/d/f/f/g-g-g System G@G@GBHCIDJELC G@G@GBHCIDJELD 7f7f6i5m4p1s.u+w(x$x$x x T S$S$S(S+T.V1X4[5^6b7f7f& &f&f%g$g$g#g"f"f#d$d$d%d&f&fV &\&\%^$^$^#^"\"\#[$Z$Z%[&\&\V "o"o#n$m$m%n&o&o%p$q$q#p"o"oV )m)m)l)k)k*j,k,k,l,m,m*n)m)mV -g-g,g+f+f,d-d-d/d/f/f/g-g-gV G@G@GBHCIDJELC G@G@GBHCIDJELD &7f7f6i5m4p1s.u+w(x$x$x x T S$S$S(S+T.V1X4[5^6b7f7f &f&f%g$g$g#g"f"f#d$d$d%d&f&f "o"o#n$m$m%n&o&o%p$q$q#p"o"o )m)m)l)k)k*j,k,k,l,m,m*n)m)m -g-g,g+f+f,d-d-d/d/f/f/g-g-g System G@G@GBHCIDJELC G@G@GBHCIDJELD 7f7f6i5m4p1s.u+w(x$x$x x T S$S$S(S+T.V1X4[5^6b7f7f& &f&f%g$g$g#g"f"f#d$d$d%d&f&fV &\&\%^$^$^#^"\"\#[$Z$Z%[&\&\V "o"o#n$m$m%n&o&o%p$q$q#p"o"oV )m)m)l)k)k*j,k,k,l,m,m*n)m)mV -g-g,g+f+f,d-d-d/d/f/f/g-g-gV Arial Arial Arial Arial Arial Arial Arial Arial Arial PSTN7 Arial Arial PSTN7 Arial Arial User Owned Local Structure0 Arial Wireless@ Arial Arial Local Enclave Arial (e.g. Office) Arial Cordless0 Arial Phone Arial Provider Owned Infrastructure Arial WM = Wireless Modem Arial Arial Neighborhood Arial Enclave Arial iatf_5_2_6_0010
Arial PublicH Arial TelecommunicationsC Arial Infrastructure Arial Site AC Arial Site CC Arial Site BC Arial Site DC Arial iatf_5_3_1_0012 Arial PublicH Arial TelecommunicationsC Arial Infrastructure Arial Site AC Arial Site CC Arial Site BC Arial Site DC Arial PublicH Arial TelecommunicationsC Arial Infrastructure Arial Site AC Arial Site CC Arial Site BC Arial Site DC Arial iatf_5_3_1_0012
Arial Arial Arial Arial Arial LAN Virtual Private Network Arial HostH Arial Arial Arial Arial Host Virtual Private NetworkI Arial iatf_5_3_2_0013 Arial Arial Arial Arial Arial LAN Virtual Private Network Arial HostH Arial Arial Arial Arial Host Virtual Private NetworkI Arial iatf_5_3_2_0013
Arial Arial Arial System> Arial Arial High NetworkB Arial Unprivileged Arial Subnetwork= Arial Unprivileged Arial Subnetwork= Arial iatf_5_3_0002 Arial Arial Arial System> Arial Arial High NetworkB Arial Unprivileged Arial Subnetwork= Arial Unprivileged Arial Subnetwork= Arial iatf_5_3_0002
Arial IP Header Arial Other HeadersG Arial Transport Headers Arial DataB Arial IP Header Arial Other HeadersG Arial Transport Headersa7 Arial DataB Arial Transport Headers Arial DataB Arial IP Header Arial Other HeadersG Arial ESP Headers Arial IP Header Arial Other HeadersG Arial ESP Headerso= Arial Encapsulating Security Protocol (ESP) Transport Mode= Arial Encapsulating Security Protocol (ESP) Tunnel Mode Arial IP Diagram Arial Clear Arial Encrypted Arial iatf_5_3_3_0014 Arial IP Header Arial Other HeadersG Arial Transport Headers Arial DataB Arial IP Header Arial Other HeadersG Arial Transport Headers Arial DataB Arial Transport Headers Arial DataB Arial IP Header Arial Other HeadersG Arial ESP Headers Arial IP Header Arial Other HeadersG Arial ESP Headers Arial Encapsulating Security Protocol (ESP) Transport Mode= Arial Encapsulating Security Protocol (ESP) Tunnel Mode Arial IP Diagram Arial Clear Arial Encrypted Arial IP Header Arial Other HeadersG Arial Transport Headers Arial DataB Arial IP Header& Arial Other HeadersG Arial Transport Headers Arial DataB Arial IP Header Arial Other HeadersG Arial Transport Headers Arial DataB Arial IP Header Arial Other HeadersG Arial Transport Headers Arial DataB Arial Transport Headers Arial DataB Arial Transport Headers Arial DataB Arial IP Header Arial Other HeadersG Arial ESP Headers Arial IP Header Arial Other HeadersG Arial ESP Headers Arial IP Header Arial Other HeadersG Arial ESP Headers Arial IP Header Arial Other HeadersG Arial ESP Headers Arial Encapsulating Security Protocol (ESP) Transport Mode= Arial Encapsulating Security Protocol (ESP) Tunnel Mode Arial IP Diagram Arial Clear Arial Encrypted Arial iatf_5_3_3_0014
Arial Arial Server2 Arial Arial Terminal- Arial Gateway Arial Telephones- Arial ISDN Arial PSTN2 Arial WAN/InternetG Arial Network Arial Enterprise2 Arial STU/STE Arial SIP 2 Arial VoIP2 Arial Handset Arial SIP LAN Arial Data6 Arial Terminal- Arial SIP User Traffic (RTP)2 Arial SIP Control 2 Arial Signaling Arial SS7 Signaling & Arial PSTN User Traffic Arial SIP Control 2 Arial Signaling Arial iatf_5_4_1_5401 Arial Arial Server2 Arial Arial Terminal- Arial Gateway Arial Telephones- Arial ISDN Arial PSTN2 Arial ISDN Arial ISDN Arial PSTN2 Arial PSTN2 Arial WAN/InternetG Arial WAN/InternetG Arial Network Arial Enterprise2 Arial Network Arial Enterprise2 Arial STU/STE Arial SIP 2 Arial VoIP2 Arial Handset Arial SIP LAN Arial Data6 Arial Terminal- Arial SIP User Traffic (RTP)2 Arial SIP Control 2 Arial Signaling Arial SS7 Signaling & Arial PSTN User Traffic Arial SIP Control 2 Arial Signaling Arial iatf_5_4_1_5401
Arial MGC (CCA) Arial MGC (CCA) Arial H.323 or6 Arial Arial Core Packet Arial Network Arial Arial Arial Arial Backbone0 Arial Arial Backbone0 Arial VOIP Network2 Arial Arial POTS Arial Arial Phone Arial POTS Arial Arial Phone Arial MGCP of Megaco? Arial MGCP of Megaco? Arial iatf_5_4_2_5402 Arial MGC (CCA) Arial MGC (CCA) Arial H.323 or6 Arial Arial Core Packet Arial Network Arial Core Packet Arial Network Arial Arial Arial Arial Backbone0 Arial Arial Backbone0 Arial Arial Backbone0 Arial Arial Backbone0 Arial VOIP Network2 Arial Arial POTS Arial Arial Phone Arial POTS Arial Arial Phone Arial MGCP of Megaco? Arial MGCP of Megaco? Arial iatf_5_4_2_5402
Arial iatf_5_4_3_5403 Arial VoIP LAN2 Arial Arial Network Arial Arial VoIP LAN2 Arial VoIP Enabled2 Arial IP Host Arial VoIP Enabled2 Arial IP Host Arial VoIP2 Arial Handset Arial VoIP2 Arial Handset Arial Voice Enabled Arial ATM Host2 Arial Gateway Arial Gateway Arial Arial Arial Arial iatf_5_4_3_5403 Arial VoIP LAN2 Arial Arial Network Arial Arial VoIP LAN2 Arial VoIP Enabled2 Arial IP Host Arial VoIP Enabled2 Arial IP Host Arial VoIP2 Arial Handset Arial VoIP2 Arial Handset Arial Voice Enabled Arial ATM Host2 Arial Gateway Arial Gateway Arial Arial Arial Arial VoIP LAN2 Arial Arial Network Arial Arial VoIP LAN2 Arial VoIP LAN2 Arial VoIP LAN2 Arial Arial Network Arial Arial Arial Network Arial Arial Network Arial Arial VoIP LAN2 Arial VoIP LAN2 Arial VoIP Enabled2 Arial IP Host Arial VoIP Enabled2 Arial IP Host Arial VoIP2 Arial Handset Arial VoIP2 Arial Handset Arial Voice Enabled Arial ATM Host2 Arial Gateway Arial Gateway Arial Arial Arial
Arial PABX2 Arial FRAD. Arial FRAD. Arial Frame Arial Relay Arial iatf_5_4_4_5404 Arial PABX2 Arial FRAD. Arial FRAD. Arial Frame Arial Relay Arial Frame Arial Relay Arial iatf_5_4_4_5404
Arial Enterprise- Arial Packet Switched Arial Data Network0 Arial Data0 Arial Terminal) Arial POTS- Arial Handset Arial Circuit Switched0 Arial PBX Network Arial PSTN- Arial WAN/InternetA Arial POTS- Arial Handset Arial Data0 Arial Terminal) Arial VoIP- Arial Handset Arial WAN/InternetA Arial VoIP LAN- Arial VoIP LAN- Arial VoIP LAN- Arial PSTN- Arial VoIP Enabled- Arial Terminal) Arial VoIP- Arial Handset Arial VoIP Enabled- Arial Terminal) Arial Media Arial Gateway Arial iatf_5_4_5_5405 Arial Enterprise- Arial Packet Switched Arial Data Network0 Arial Data0 Arial Terminal) Arial POTS- Arial Handset Arial Circuit Switched0 Arial PBX Network Arial PSTN- Arial WAN/InternetA Arial POTS- Arial Handset Arial Data0 Arial Terminal) Arial Enterprise- Arial Packet Switched Arial Data Network0 Arial Enterprise- Arial Packet Switched Arial Data Network0 Arial Data0 Arial Terminal) Arial POTS- Arial Handset Arial Circuit Switched0 Arial PBX Network Arial Circuit Switched0 Arial PBX Network Arial PSTN- Arial PSTN- Arial WAN/InternetA Arial WAN/InternetA Arial POTS- Arial Handset Arial Data0 Arial Terminal) Arial VoIP- Arial Handset Arial WAN/InternetA Arial VoIP LAN- Arial VoIP LAN- Arial VoIP LAN- Arial PSTN- Arial VoIP Enabled- Arial Terminal) Arial VoIP- Arial Handset Arial VoIP Enabled- Arial Terminal) Arial Media Arial Gateway Arial VoIP- Arial Handset Arial WAN/InternetA Arial WAN/InternetA Arial VoIP LAN- Arial VoIP LAN- Arial VoIP LAN- Arial VoIP LAN- Arial VoIP LAN- Arial VoIP LAN- Arial VoIP LAN- Arial VoIP LAN- Arial VoIP LAN- Arial PSTN- Arial PSTN- Arial VoIP Enabled- Arial Terminal) Arial VoIP- Arial Handset Arial VoIP Enabled- Arial Terminal) Arial Media Arial Gateway Arial iatf_5_4_5_5405
Arial Local Computing Environment Arial Printer Arial Subordinate Arial Arial Vulnerability Scanner Arial Local Area# Arial Network Arial Workstation Arial Workstation Arial Workstation Arial Certificate Arial Server' Arial Shared' Arial Application Arial Servers Arial Virus Arial Protection' Arial Directory Arial Services' Arial Protected Arial Application Arial Servers Arial Intrusion Arial Detection Arial LAN Management Arial Boundary Protection $ Arial (Guard, Firewall, etc.) Arial Remote Access Protection Arial (Communications Server, Encryption, etc.) Arial Physical Access Controls' Arial Connections to Networks Arial and Other Enclaves* Arial Boundary Protection Devices 6 Arial Control Access Into Arial Local Computing Environment Arial Enclave Boundary Defines Separation Between Arial Arial Remote Users: Arial Dial Up Access6 Arial ISP Connection Arial Dedicated Line6 Arial Inside & Outside Arial iatf_6_0_1_0072 Arial Local Computing Environment Arial Printer Arial Subordinatey' Arial Arial Vulnerability Scanner Arial Local Area# Arial Network Arial Workstation Arial Workstation Arial Workstation Arial Certificate Arial Server' Arial Shared' Arial Application Arial Servers Arial Virus Arial Protection' Arial Directory Arial Services' Arial Protected Arial Application Arial Servers Arial Intrusion Arial Detection Arial LAN Management Arial Boundary Protection $ Arial (Guard, Firewall, etc.) Arial Remote Access Protection Arial (Communications Server, Encryption, etc.) Arial Physical Access Controls' Arial Connections to Networks Arial and Other Enclaves* Arial Boundary Protection Devices 6 Arial Control Access Into Arial Local Computing Environment Arial Enclave Boundary Defines Separation Between Arial Arial Remote Users: Arial Dial Up Access6 Arial ISP Connection Arial Dedicated Line6 Arial Inside & Outside Arial iatf_6_0_1_0072
Arial Private Transport Arial Network Arial Authorized Remote User- Arial FORTEZZA) Arial , Secure ID, AAA, Arial Arial (Pretty Good Protection) Arial Dedicated connection* Arial Public Network Arial (Internet) Arial Arial HTTP6 Arial Arial Arial Arial Arial Mail= Arial Video/2 Arial Voice Arial SNMP2 Arial Arial Arial Public Telephone Arial Network Arial Router0 Arial Private Arial Network Arial (Different level of Arial information sensitivity) Arial Arial Arial Private Arial Network Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Encoder/Decoder Arial Arial Arial Arial Arial Boundary Protection Arial (Guards, Firewalls, etc.) Arial Enclave Boundary- Arial Remote Access Protection0 Arial Virtual Private Network Arial Arial Protected Arial Workspace Arial Offsite Arial Arial Arial Arial Arial Arial iatf_6_1_1_0101 Arial Private Transport Arial Network Arial Private Transport Arial Network Arial Authorized Remote User- Arial FORTEZZA) Arial , Secure ID, AAA, Arial Arial (Pretty Good Protection) Arial Dedicated connection* Arial Public Network Arial (Internet) Arial Public Network Arial (Internet) Arial Arial HTTP6 Arial Arial Arial Arial Arial Mail= Arial Video/2 Arial Voice Arial SNMP2 Arial Arial Arial Public Telephone Arial Network Arial Public Telephone Arial Network Arial Router0 Arial Private Arial Network Arial (Different level of Arial information sensitivity) Arial Private Arial Network Arial (Different level of Arial information sensitivity) Arial Arial Arial Arial Arial Private Arial Network Arial Arial Arial Arial Arial Arial Arial Private Arial Network Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Encoder/Decoder Arial Arial Arial Arial Arial Boundary Protection Arial (Guards, Firewalls, etc.) Arial Enclave Boundary- Arial Remote Access Protection0 Arial Virtual Private Network Arial Arial Encoder/Decoder Arial Arial Arial Arial Arial Boundary Protection Arial (Guards, Firewalls, etc.) Arial Arial Arial Arial Arial Boundary Protection Arial (Guards, Firewalls, etc.) Arial Enclave Boundary- Arial Enclave Boundary- Arial Remote Access Protection0 Arial Virtual Private Network Arial Arial Protected Arial Workspace Arial Offsite Arial Arial Arial Arial Arial Arial Protected Arial Workspace Arial Offsite Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial iatf_6_1_1_0101
Arial Source Host Arial Destination Host0 Arial Application Gateway Arial iatf_6_1_2_0102 Arial Source Host Arial Source Host Arial Destination Host0 Arial Destination Host0 Arial Application Gateway Arial Application Gateway Arial iatf_6_1_2_0102
Arial FIREWALL3 Arial Proxy Software: Arial Telnet, FTP,4 Arial DNS,< Arial SMTP8 Arial External7 Arial Network Arial Internal Network Arial Enclave Boundary7 Arial Network Arial Interface Arial Network Arial Interface Arial Router0 Arial iatf_6_1_3_0103 Arial FIREWALL3 Arial FIREWALL3 Arial Proxy Software: Arial Telnet, FTP,4 Arial DNS,< Arial SMTP8 Arial External7 Arial Network Arial Internal Network Arial Enclave Boundary7 Arial Network Arial Interface Arial Network Arial Interface Arial Router0 Arial Router0 Arial iatf_6_1_3_0103
Arial FIREWALL3 Arial Packet7 Arial Filtering Arial Internal Network Arial Enclave Boundary7 Arial External7 Arial Network Arial Network Arial Interface Arial Network Arial Interface Arial Router* Arial Router* Arial iatf_6_1_4_0104 Arial FIREWALL3 Arial FIREWALL3 Arial Packet7 Arial Filtering Arial Internal Network Arial Enclave Boundary7 Arial External7 Arial Network Arial Network Arial Interface Arial Network Arial Interface Arial Router* Arial Router* Arial Router* Arial Router* Arial iatf_6_1_4_0104
Arial FIREWALL3 Arial Outer RouterA Arial No Access to0 Arial Internal Network Arial Internal Network Arial Enclave Boundary7 Arial External7 Arial Network Arial Network Arial Interface Arial Network Arial Interface Arial Network Arial Interface Arial Demilitarized Arial Zone3 Arial (DMZ) Arial Isolated Network Arial Inner Router Arial No Access to* Arial External Network' Arial Router* Arial Router* Arial Bastion Host0 Arial iatf_6_1_5_0105 Arial FIREWALL3 Arial FIREWALL3 Arial Outer RouterA Arial No Access to0 Arial Internal Network Arial Internal Network Arial Enclave Boundary7 Arial External7 Arial Network Arial Network Arial Interface Arial Network Arial Interface Arial Network Arial Interface Arial Demilitarized Arial Zone3 Arial (DMZ) Arial Isolated Network Arial Inner Router Arial No Access to* Arial External Network' Arial Router* Arial Router* Arial Router* Arial Router* Arial Bastion Host0 Arial iatf_6_1_5_0105
Arial Private Transport Arial Network Arial Authorized Remote User- Arial FORTEZZA) Arial , Secure ID, AAA, Arial Arial (Pretty Good Protection) Arial Dedicated connection* Arial Public Network Arial (Internet) Arial Arial HTTP6 Arial Arial Arial Arial Arial Mail= Arial Video/2 Arial Voice Arial SNMP2 Arial Arial Arial Public Telephone Arial Network Arial Router0 Arial Private Arial Network Arial (Different level of Arial Information sensitivity) Arial Arial Arial Arial Arial Arial Arial Encoder/Decoder Arial Arial Arial Arial Arial Boundary Protection Arial (Guards, Firewalls, etc.) Arial Enclave Boundary- Arial Remote Access Protection0 Arial Virtual Private Network Arial Arial Private Arial Network Arial Arial Arial Arial Arial Arial Arial Protected Arial Workspace Arial Offsite Arial Arial Arial Arial Arial Arial iatf_6_1_6_0106 Arial Private Transport Arial Network Arial Authorized Remote User- Arial FORTEZZA) Arial , Secure ID, AAA, Arial Arial (Pretty Good Protection) Arial Dedicated connection* Arial Public Network Arial (Internet) Arial Arial HTTP6 Arial Arial Arial Arial Arial Mail= Arial Video/2 Arial Voice Arial SNMP2 Arial Arial Arial Public Telephone Arial Network Arial Public Telephone Arial Network Arial Router0 Arial Private Arial Network Arial (Different level of Arial Information sensitivity) Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Encoder/Decoder Arial Arial Arial Arial Arial Boundary Protection Arial (Guards, Firewalls, etc.) Arial Enclave Boundary- Arial Remote Access Protection0 Arial Virtual Private Network Arial Arial Encoder/Decoder Arial Arial Arial Arial Arial Boundary Protection Arial (Guards, Firewalls, etc.) Arial Arial Arial Arial Arial Boundary Protection Arial (Guards, Firewalls, etc.) Arial Enclave Boundary- Arial Enclave Boundary- Arial Remote Access Protection0 Arial Virtual Private Network Arial Arial Private Arial Network Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Protected Arial Workspace Arial Offsite Arial Arial Arial Arial Arial Arial Protected Arial Workspace Arial Offsite Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial iatf_6_1_6_0106
Arial Private Transport Arial Network Arial Authorized Remote User- Arial FORTEZZA) Arial , Secure ID, AAA, Arial Arial (Pretty Good Protection) Arial Dedicated connection* Arial Public Network Arial (Internet) Arial Arial HTTP6 Arial Arial Arial Arial Arial Mail= Arial Video/2 Arial Voice Arial SNMP2 Arial Arial Arial Public Telephone Arial Network Arial Router0 Arial Private Arial Network Arial (Different level of Arial Information sensitivity) Arial Arial Arial Arial Arial Arial Arial Encoder/Decoder Arial Arial Arial Arial Arial Boundary Protection Arial (Guards, Firewalls, etc.) Arial Enclave Boundary- Arial Remote Access Protection0 Arial Virtual Private Network Arial Arial Private Arial Network Arial Arial Arial Arial Arial Protected Arial Workspace Arial Offsite Arial Arial Arial Arial Arial Arial Arial Arial iatf_6_1_7_0107 Arial Private Transport Arial Network Arial Authorized Remote User- Arial FORTEZZA) Arial , Secure ID, AAA, Arial Arial (Pretty Good Protection) Arial Dedicated connection* Arial Public Network Arial (Internet) Arial Arial HTTP6 Arial Arial Arial Arial Arial Mail= Arial Video/2 Arial Voice Arial SNMP2 Arial Arial Arial Public Telephone Arial Network Arial Public Telephone Arial Network Arial Router0 Arial Private Arial Network Arial (Different level of Arial Information sensitivity) Arial Arial Arial Arial Arial Arial Arial Arial Arial Encoder/Decoder Arial Arial Arial Arial Arial Boundary Protection Arial (Guards, Firewalls, etc.) Arial Enclave Boundary- Arial Remote Access Protection0 Arial Virtual Private Network Arial Arial Encoder/Decoder Arial Arial Arial Arial Arial Boundary Protection Arial (Guards, Firewalls, etc.) Arial Arial Arial Arial Arial Boundary Protection Arial (Guards, Firewalls, etc.) Arial Enclave Boundary- Arial Enclave Boundary- Arial Remote Access Protection0 Arial Virtual Private Network Arial Arial Private Arial Network Arial Arial Arial Arial Arial Private Arial Network Arial Arial Arial Arial Arial Arial Arial Arial Arial Protected Arial Workspace Arial Offsite Arial Arial Arial Arial Arial Arial Protected Arial Workspace Arial Offsite Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial iatf_6_1_7_0107
Arial Private Transport Arial Network Arial Authorized Remote User- Arial FORTEZZA) Arial , Secure ID, AAA, Arial Arial (Pretty Good Protection) Arial Dedicated connection* Arial Public Network Arial (Internet) Arial Arial HTTP6 Arial Arial Arial Arial Arial Mail= Arial Video/2 Arial Voice Arial SNMP2 Arial Arial Arial Public Telephone Arial Network Arial Router0 Arial Private Arial Network Arial (Different level of Arial Information sensitivity) Arial Arial Arial Arial Arial Arial Arial Encoder/Decoder Arial Arial Arial Arial Arial Boundary Protection Arial (Guards, Firewalls, etc.) Arial Enclave Boundary- Arial Remote Access Protection0 Arial Virtual Private Network Arial Arial Private Arial Network Arial Arial Arial Arial Arial Arial Arial Protected Arial Workspace Arial Offsite Arial Arial Arial Arial Arial Arial iatf_6_1_8_0108 Arial Private Transport Arial Network Arial Authorized Remote User- Arial FORTEZZA) Arial , Secure ID, AAA, Arial Arial (Pretty Good Protection) Arial Dedicated connection* Arial Public Network Arial (Internet) Arial Arial HTTP6 Arial Arial Arial Arial Arial Mail= Arial Video/2 Arial Voice Arial SNMP2 Arial Arial Arial Public Telephone Arial Network Arial Router0 Arial Private Arial Network Arial (Different level of Arial Information sensitivity) Arial Private Arial Network Arial (Different level of Arial Information sensitivity) Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Encoder/Decoder Arial Arial Arial Arial Arial Boundary Protection Arial (Guards, Firewalls, etc.) Arial Enclave Boundary- Arial Remote Access Protection0 Arial Virtual Private Network Arial Arial Encoder/Decoder Arial Arial Arial Arial Arial Boundary Protection Arial (Guards, Firewalls, etc.) Arial Arial Arial Arial Arial Boundary Protection Arial (Guards, Firewalls, etc.) Arial Enclave Boundary- Arial Enclave Boundary- Arial Remote Access Protection0 Arial Virtual Private Network Arial Arial Private Arial Network Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Protected Arial Workspace Arial Offsite Arial Arial Arial Arial Arial Arial Protected Arial Workspace Arial Offsite Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial iatf_6_1_8_0108
Arial Private Transport Arial Network Arial Authorized Remote User- Arial FORTEZZA) Arial , Secure ID, AAA, Arial Arial (Pretty Good Protection) Arial Dedicated connection* Arial Public Network Arial (Internet) Arial Arial HTTP6 Arial Arial Arial Arial Arial Mail= Arial Video/2 Arial Voice Arial SNMP2 Arial Arial Arial Public Telephone Arial Network Arial Router0 Arial Private Arial Network Arial (Different level of Arial Information sensitivity) Arial Arial Arial Arial Arial Arial Arial Encoder/Decoder Arial Arial Arial Arial Arial Boundary Protection Arial (Guards, Firewalls, etc.) Arial Enclave Boundary- Arial Remote Access Protection0 Arial Virtual Private Network Arial Arial Private Arial Network Arial Arial Arial Arial Arial Arial Arial Protected Arial Workspace Arial Offsite Arial Arial Arial Arial Arial Arial iatf_6_1_9_0109 Arial Private Transport Arial Network Arial Authorized Remote User- Arial FORTEZZA) Arial , Secure ID, AAA, Arial Arial (Pretty Good Protection) Arial Dedicated connection* Arial Public Network Arial (Internet) Arial Arial HTTP6 Arial Arial Arial Arial Arial Mail= Arial Video/2 Arial Voice Arial SNMP2 Arial Arial Arial Public Telephone Arial Network Arial Router0 Arial Private Arial Network Arial (Different level of Arial Information sensitivity) Arial Private Arial Network Arial (Different level of Arial Information sensitivity) Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Encoder/Decoder Arial Arial Arial Arial Arial Boundary Protection Arial (Guards, Firewalls, etc.) Arial Enclave Boundary- Arial Remote Access Protection0 Arial Virtual Private Network Arial Arial Encoder/Decoder Arial Arial Arial Arial Arial Boundary Protection Arial (Guards, Firewalls, etc.) Arial Arial Arial Arial Arial Boundary Protection Arial (Guards, Firewalls, etc.) Arial Enclave Boundary- Arial Enclave Boundary- Arial Remote Access Protection0 Arial Virtual Private Network Arial Arial Private Arial Network Arial Arial Arial Arial Arial Arial Arial Private Arial Network Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Protected Arial Workspace Arial Offsite Arial Arial Arial Arial Arial Arial Protected Arial Workspace Arial Offsite Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial Arial iatf_6_1_9_0109
Arial Mission/? Arial Business6 Arial Architecture5 Arial Design6 Arial Implementation Arial MoreG Arial Abstract: Arial MoreG Arial Specific7 Arial SPECIFICATIONS' Arial COMPONENTS* Arial FUNCTIONS Arial iatf Arial Arial Mission/? Arial Business6 Arial Architecture5 Arial Design6 Arial Implementation Arial MoreG Arial Abstract: Arial MoreG Arial Specific7 Arial SPECIFICATIONS' Arial COMPONENTS* Arial FUNCTIONS Arial iatf Arial
Arial Mission/Business Function Arial Information Management Functions Arial System Architecture Arial Security Architecture Arial System. Arial Threats Arial Mission/8 Arial Business0 Arial Threats Arial Information Arial Threats Arial Information Management Policy Arial Information Protection Policy Arial Information Management Policy Arial Information System Security Requirements Arial iatf_h_2_0085 Arial Mission/Business Function Arial Information Management Functions Arial System Architecture Arial Security Architecture Arial System. Arial Threats Arial Mission/8 Arial Business0 Arial Threats Arial Information Arial Threats Arial Information Management Policy Arial Information Protection Policy Arial Information Management Policy Arial Information Protection Policy Arial Information Management Policy Arial Information System Security Requirements Arial Information Management Policy Arial Information System Security Requirements Arial iatf_h_2_0085
Arial ISSE Arial Process Arial Disciplines Arial COMSEC6 Arial COMPUSEC6 Arial OPSEC Arial etc.* Arial Mechanisms? Arial Products2 Arial Doctrine6 Arial Standards Arial Methods Arial Tools Arial Technology. Arial Crypto6 Arial Physical2 Arial etc.* Arial Customersi6 Arial Systems Arial Arial iatf_h_3_0086 Arial ISSE Arial Process Arial Disciplines Arial COMSEC6 Arial COMPUSEC6 Arial OPSEC Arial etc.* Arial Disciplines Arial COMSEC6 Arial COMPUSEC6 Arial OPSEC Arial etc.* Arial Mechanisms? Arial Products2 Arial Doctrine6 Arial Standards Arial Methodst= Arial Tools Arial Mechanisms? Arial Products2 Arial Doctrine6 Arial Standards Arial Methods Arial Tools Arial Technology. Arial Crypto6 Arial Physical2 Arial etc.* Arial Technology. Arial Crypto6 Arial Physical2 Arial etc.* Arial Customers Arial Systems Arial Arial iatf_h_3_0086
Arial DISCOVER* Arial NEEDS Arial DEFINE* Arial SYSTEM' Arial REQUIREMENTS* Arial DESIGN* Arial SYSTEM' Arial ARCHITECTURE) Arial DEVELOP Arial DETAILED* Arial DESIGN* Arial IMPLEMENT Arial SYSTEM' Arial iatf_h_4_0087 Arial ASSESS; Arial EFFECTIVENESS Arial USERS/USERS Arial REPRESENTATIVES Arial PNEe7 Arial DISCOVER* Arial NEEDS Arial DEFINE* Arial SYSTEM' Arial REQUIREMENTS* Arial DESIGN* Arial SYSTEM' Arial ARCHITECTURE) Arial DEVELOP Arial DETAILED* Arial DESIGN* Arial IMPLEMENT Arial SYSTEM' Arial DISCOVER* Arial NEEDS Arial DEFINE* Arial SYSTEM' Arial REQUIREMENTS* Arial DESIGN* Arial SYSTEM' Arial ARCHITECTURE) Arial DEVELOP Arial DETAILED* Arial DESIGN* Arial IMPLEMENT Arial SYSTEM' Arial iatf_h_4_0087 Arial ASSESS; Arial EFFECTIVENESS Arial USERS/USERS Arial REPRESENTATIVES.< Arial
Arial A Protection Profile is “an implementation7 Arial Arial independent set of security requirements and Arial objectives for a category of products or systems” that contains Arial Arial Arial Security objectives (based on mission description, threats, poli7 Arial cies, and assumptions). Arial Arial Description of target of evaluation.< Arial Arial Security functions and assurance requirements.7 Arial Arial Security environment. Arial Arial Rationale for objectives, functions, and assurances.< Arial Iatf_app_h_5_h005 Arial A Protection Profile is “an implementation7 Arial Arial independent set of security requirements and Arial objectives for a category of products or systems” that contains Arial Arial Arial Security objectives (based on mission description, threats, poli7 Arial cies, and assumptions). Arial Arial Description of target of evaluation.< Arial Arial Security functions and assurance requirements.7 Arial Arial Security environment. Arial Arial Rationale for objectives, functions, and assurances.< Arial A Protection Profile is “an implementation7 Arial Arial independent set of security requirements and Arial objectives for a category of products or systems” that contains Arial Arial Arial Security objectives (based on mission description, threats, poli7 Arial cies, and assumptions). Arial Arial Description of target of evaluation.< Arial Arial Security functions and assurance requirements.7 Arial Arial Security environment. Arial Arial Rationale for objectives, functions, and assurances.< Arial Iatf_app_h_5_h005
Arial Iatf_app_h_6_h006 Arial Document Mission Need Arial Arial Arial System mission, functions, interfaces.2 Arial Arial Operational organization. Arial Arial Information category and classification. Arial Arial Expected system life cycle. Arial Arial System user characteristics.2 Arial Arial Operational environment.: Arial Conduct Registration Arial Arial Arial Register system; inform Designating Approval Authority (DAA). Arial Arial Prepare mission description and system identification 2 Arial Arial Arial General concept and boundaries.n: Arial Prepare Arial environment and ) Arial threat description Arial Arial Arial Currently known threats Arial against specific system mission.* Arial Arial Prepare system architecture description.2 Arial Determine system security requirements Arial Arial Arial Confidentiality, integrity, availability, accountability, and as6 Arial surance.& Arial Iatf_app_h_6_h006 Arial Document Mission Need Arial Arial Arial System mission, functions, interfaces.2 Arial Arial Operational organization. Arial Arial Information category and classification. Arial Arial Expected system life cycle. Arial Arial System user characteristics.2 Arial Arial Operational environment.: Arial Conduct Registration Arial Arial Arial Register system; inform Designating Approval Authority (DAA). Arial Arial Prepare mission description and system identification 2 Arial Arial Arial General concept and boundaries. Arial Prepare Arial environment and ) Arial threat description Arial Arial Arial Currently known threats Arial against specific system mission.* Arial Arial Prepare system architecture description.2 Arial Determine system security requirements Arial Arial Arial Confidentiality, integrity, availability, accountability, and as6 Arial surance.&
Arial Compare & < Arial Contrast Arial Available 7 Arial Attacks Arial Compare & < Arial Contrast Arial Available 7 Arial Attacks Arial Develope< Arial Theory of 4 Arial Adversarial 7 Arial Behavior7 Arial Develop Arial Theory of 4 Arial Adversarial 7 Arial Behavior7 Arial Develop Arial Theory of 4 Arial Mission ImpactF Arial Develop Arial Theory of 4 Arial Mission ImpactF Arial Compare & < Arial Contrast Arial Various 7 Arial Courses of Arial Action7 Arial Compare & < Arial Contrast Arial Various 7 Arial Courses of Arial Action7 Arial Decide on < Arial Courses of Arial Action: Arial Decide on < Arial Courses of t< Arial Action: Arial Risk Analysis Arial Relative6 Arial Importance of Arial Mission Critical= Arial Parameters2 Arial Countermeasure6 Arial Analysis2 Arial System Improvements Arial Vulnerability Arial & Attack2 Arial Identification & Arial Characterization6 Arial Threat- Arial Identification & Arial Characterization6 Arial Mission Impact= Arial Characterization6 Arial Research and Incident Analysis6 Arial Community Investment in Arial Research & Studies6 Arial iatf_app_h_7_0144t Arial Compare & < Arial Contrast Arial Available 7 Arial Attacks Arial Compare & < Arial Contrast Arial Available 7 Arial Attacks Arial Developr< Arial Theory of 4 Arial Adversarial 7 Arial Behavior7 Arial Develop Arial Theory of 4 Arial Adversarial 7 Arial Behavior7 Arial Develop Arial Theory of 4 Arial Mission ImpactF Arial Develop Arial Theory of 4 Arial Mission ImpactF Arial Compare & < Arial Contrast Arial Various 7 Arial Courses of Arial Action7 Arial Compare & < Arial Contrast Arial Various 7 Arial Courses of Arial Action7 Arial Decide on < Arial Courses of Arial Action: Arial Decide on < Arial Courses of Arial Action: Arial Compare & < Arial Contrast Arial Available 7 Arial Attacks Arial Compare & < Arial Contrast Arial Available 7 Arial Attacks Arial Develop Arial Theory of 4 Arial Adversarial 7 Arial Behavior7 Arial Develop Arial Theory of 4 Arial Adversarial 7 Arial Behavior7 Arial Develop Arial Theory of 4 Arial Mission ImpactF Arial Develop Arial Theory of 4 Arial Mission ImpactF Arial Compare & < Arial Contrast Arial Various 7 Arial Courses of Arial Action7 Arial Compare & < Arial Contrast Arial Various 7 Arial Courses of Arial Action7 Arial Decide on < Arial Courses of Arial Action: Arial Decide on < Arial Courses of Arial Action: Arial Risk Analysis Arial Relative6 Arial Importance of Arial Mission Critical= Arial Parameters2 Arial Countermeasure6 Arial Analysis2 Arial Relative6 Arial Importance of Arial Mission Critical= Arial Parameters2 Arial Countermeasure6 Arial Analysis2 Arial System Improvements Arial Vulnerability Arial & Attack2 Arial Identification & Arial Characterization6 Arial Threat- Arial Identification & Arial Characterization6 Arial Mission Impact= Arial Characterization6 Arial Research and Incident Analysis6 Arial Community Investment in Arial Research & Studies6 Arial Research and Incident Analysis6 Arial Research and Incident Analysis6 Arial Community Investment in Arial Research & Studies6 Arial Community Investment in Arial Research & Studies6 Arial iatf_app_h_7_0144
Arial Approaching the Arial Customer6 Arial Acquiring Arial the IMM Arial Least Arial Privilege IMM Arial Threat. Arial Analysis5 Arial Customer6 Arial Priorities2 Arial Preparing Arial the IPP Arial Customer6 Arial Arial Arial Arial iatf_h_8_0090 Arial Approaching the Arial Customer6 Arial Acquiring Arial the IMM Arial Least Arial Privilege IMM Arial Threat. Arial Analysis5 Arial Customer6 Arial Priorities2 Arial Preparing Arial the IPP Arial Customer6 Arial Arial Arial Arial iatf_h_8_0090
Arial Process Arial Informationm Arial Process Arial Arial Information Arial Process Arial Arial User< Arial Users 1 Arial Users 2 Arial Fig. a3 Arial Fig. b3 Arial Iatf Arial _app_h_9_0091 Arial Process Arial Information Arial Process Arial Arial Information Arial Process Arial Arial User< Arial Users 1 Arial Users 2 Arial Fig. a3 Arial Fig. b3 Arial Process Arial Information Arial Information Arial Process Arial Arial Information Arial Information Arial Process Arial Arial User< Arial Users 1 Arial Users 2 Arial Fig. a3 Arial Fig. b3 Arial Iatf Arial _app_h_9_0091
Arial Control Arial Resources Arial Process Arial Output Data Arial Input Data Arial iatf_h_ Arial idef Arial _model Arial Control Arial Resources Arial Process Arial Output Data Arial Input Data Arial iatf_h_ Arial idef Arial _model
Arial Raw Data6 Arial Distribution6 Arial Analysis5 Arial Collection6 Arial Collected Arial data. Arial Analyzed5 Arial data. Arial Distributor Arial Policy2 Arial Collector Arial Policy2 Arial Distributed Arial Data6 Arial iatf_app_h_10_0092 Arial Raw Data6 Arial Distribution6 Arial Analysis5 Arial Collection6 Arial Collected Arial data. Arial Analyzed5 Arial data. Arial Distributor Arial Policy2 Arial Collector Arial Policy2 Arial Distributed Arial Data6 Arial Raw Data6 Arial Distribution6 Arial Analysis5 Arial Collection6 Arial Collected Arial data. Arial Analyzed5 Arial data. Arial Distribution6 Arial Analysis5 Arial Collection6 Arial Collected Arial data. Arial Analyzed5 Arial data. Arial Distributor Arial Policy2 Arial Distributor Arial Policy2 Arial Distributor Arial Policy2 Arial Collector Arial Policy2 Arial Collector Arial Policy2 Arial Collector Arial Policy2 Arial Distributed Arial Data6 Arial iatf_app_h_10_0092
Arial Distribution6 Arial Release Arial Analysis5 Arial Release Arial Collection6 Arial Released6 Arial Collected Arial Data6 Arial Collectedy6 Arial Data6 Arial Arial Data6 Arial Analyzed5 Arial Data6 Arial Released6 Arial Analyzed5 Arial Data6 Arial Distributed Arial Data6 Arial iatf_app_h_11_0093 Arial Distribution6 Arial Release Arial Analysis5 Arial Release Arial Collection6 Arial Released6 Arial Collected Arial Data6 Arial Collected Arial Data6 Arial Arial Data6 Arial Analyzed5 Arial Data6 Arial Released6 Arial Analyzed5 Arial Data6 Arial Distributed Arial Data6 Arial Distribution6 Arial Release Arial Analysis5 Arial Release Arial Collection6 Arial Distribution6 Arial Release Arial Analysis5 Arial Releasey6 Arial Collection6 Arial Released6 Arial Collected Arial Data6 Arial Collected Arial Data6 Arial Arial Data6 Arial Analyzed5 Arial Data6 Arial Released6 Arial Analyzed5 Arial Data6 Arial Distributed Arial Data6 Arial Released6 Arial Collected Arial Data6 Arial Collected Arial Data6 Arial Arial Data6 Arial Analyzed5 Arial Data6 Arial Released6 Arial Analyzed5 Arial Data6 Arial Distributed Arial Data6 Arial iatf_app_h_11_0093
Arial Distribution6 Arial Release Arial Analysis5 Arial Collection6 Arial Raw, Collected, Analyzed Data Arial Releasable6 Arial Data6 Arial Distributed Arial Data6 Arial Collector Arial Analyst Arial Analyst Arial Distributor Arial POLICY: Arial Collection, Arial Analysis7 Arial POLICY: Arial Collection, Arial Analysis, Arial Releasability Arial POLICY: Arial Releasability,< Arial Distribution< Arial iatf_app_h_12_0094 Arial Distribution6 Arial Release Arial Analysis5 Arial Collection6 Arial Raw, Collected, Analyzed Data Arial Releasable6 Arial Data6 Arial Distributed Arial Data6 Arial Distribution6 Arial Release Arial Analysis5 Arial Collection6 Arial Raw, Collected, Analyzed Data Arial Releasable6 Arial Data6 Arial Distributed Arial Data6 Arial Collector Arial Analyst Arial Analyst Arial Distributor Arial POLICY: Arial Collection, Arial Analysis7 Arial POLICY: Arial Collection, Arial Analysis, Arial Releasability Arial POLICY: Arial Releasability,< Arial Distribution< Arial iatf_app_h_12_0094
Arial Collect Arial Arial Collectede< Arial Analyzed: Arial Analyze Arial Releasable< Arial Release Arial Distributed Arial Policy: C, A7 Arial Distribute< Arial Distributed Arial Analyst Arial Collectorl< Arial Policy: R Arial Policy: D Arial iatf_app_h_13_0095 Arial Collect Arial Arial Collected Arial Analyzed: Arial Analyze Arial Releasable< Arial Release Arial Distributed Arial Policy: C, A7 Arial Distribute< Arial Distributed Arial Analyst Arial Collector Arial Policy: R Arial Policy: D Arial Collect Arial Arial Collected Arial Analyzed: Arial Arial Collected Arial Analyzed: Arial Analyze Arial Releasable< Arial Releasable< Arial Release Arial Distributed Arial Policy: C, A7 Arial Distribute< Arial Distributed Arial Distributed Arial Analyst Arial Collector Arial Policy: R Arial Policy: D Arial iatf_app_h_13_0095
Arial Harm to Information Arial Disclosure6 Arial Modification? Arial Service Denial2 Arial iatf_app_h_14_0096 Arial Harm to Information Arial Disclosure6 Arial Modification? Arial Service Denial2 Arial Harm to Information Arial Disclosure6 Arial Modification? Arial Service Denial2 Arial iatf_app_h_14_0096
Arial Potentially Harmful Events2 Arial Arial Arial Malicious Threat Sources? Arial Accidents Arial Nature6 Arial Adversaries Arial iatf_app_h_15_0097 Arial Potentially Harmful Events2 Arial Arial Arial Malicious Threat Sources? Arial Accidents Arial Nature6 Arial Adversaries Arial Potentially Harmful Events2 Arial Arial Arial Malicious Threat Sources? Arial Accidents Arial Nature6 Arial Adversaries Arial iatf_app_h_15_0097
Arial Potentially Harmful Events2 Arial Arial Arial Malicious Events? Arial Accidents Arial Motivation to Attack? Arial Nature6 Arial Adversaries Arial iatf_app_h_16_0098 Arial Potentially Harmful Events2 Arial Arial Arial Malicious Events? Arial Accidents Arial Motivation to Attack? Arial Nature6 Arial Adversaries Arial Potentially Harmful Events2 Arial Arial Arial Malicious Events? Arial Accidents Arial Motivation to Attack? Arial Nature6 Arial Adversaries Arial iatf_app_h_16_0098
Arial Harm to Information Arial Disclosure6 Arial Modification? Arial Service Denial2 Arial Potentially Harmful Events2 Arial Arial Arial Malicious Events? Arial Accidents Arial Motivation to Attack? Arial Nature6 Arial Adversaries Arial Information Arial Threat4 Arial Likelihood of Harm. Arial RISK< Arial Harm6 Arial System Vulnerabilities4 Arial Harm to Assets6 Arial System4 Arial iatf_app_h_17_h017 Arial Harm to Information Arial Disclosure6 Arial Modification? Arial Service Denial2 Arial Potentially Harmful Events2 Arial Arial Arial Malicious Events? Arial Accidents Arial Motivation to Attack? Arial Nature6 Arial Adversaries Arial Information Arial Threat4 Arial Likelihood of Harm. Arial RISK< Arial Harm6 Arial System Vulnerabilities4 Arial Harm to Assets6 Arial System4 Arial iatf_app_h_17_h017
Arial Arial Arial Security7 Arial Service Arial iatf_app_h_18_h018 Arial Arial Arial Security7 Arial Service Arial Arial Arial Security7 Arial Service Arial iatf_app_h_18_h018
Arial Iatf_f_1001 Arial Arial Title: NSA Security Guidance for “Descriptive Name Arial Arial Target Environment- Arial Arial Potential Attacks Arial Arial Security Policy and Objectives2 Arial Arial Recommended Approach6 Arial Arial Security Functions2 Arial Arial Assurance Requirements2 Arial Arial Interoperability Requirements Arial Arial Supporting Infrastructure Arial Arial Administrative Information2 Arial Iatf_f_1001 Arial Arial Title: NSA Security Guidance for “Descriptive Name Arial Arial Target Environment- Arial Arial Potential Attacks Arial Arial Security Policy and Objectives2 Arial Arial Recommended Approach6 Arial Arial Security Functions2 Arial Arial Assurance Requirements2 Arial Arial Interoperability Requirements Arial Arial Supporting Infrastructure Arial Arial Administrative Information2
Arial Unicode MS
Symbol
Wingdings
Arial
SimSun
PMingLiU
MS PGothic
Dotum
Sylfaen
Estrangelo Edessa
Vrinda
Shruti
Mangal
Tunga
Sendnya
Raavi
Dhenu
Latha
Gautami
Cordia New
MS Farsi
Gulim
Times New Roman
Guide
TheDoc
Federal Computing Environment - DOD
Gesture Format
Information Availability and Protection
Information Infrastructure Elements
IA Technology Framework Access
Local Computing Environment Area
Enclave Boundaries Framework Area
Network and Infrastructure Framework Structure
Classes of Attack on the Information Infrastructure
Principle Aspects of the Defense-in-Depth
Federal Computing Environment - DOE
Defense-in-Depth Strategy
Defense-in-Depth Strategy - People
Defense-in-Depth Strategy - Technology
Defense-in-Depth Strategy - Operations
Defense-in-Depth Focus Areas
Generic Systems Engineering Process
Discover Needs
Allocation of Needs into a Solution Set
Define System Requirements
Design Ssytem Architecture
Design System Architecture
DOD 5000.2-R Systems Engineering Process
IEEE Std 1220-1998 Systems Engineering Process
Relationship of SE/ISSE and C&A
Backbone Availability Model
Wireless Extension of the Wired Infrastructure
Cellular Telephone Environment
Mobile Satellite Subscriber Environment
WLAN Environment
Pager Environment
Wireless Telephony Environments
Target Environment Communications Infrastructure
Local Virtual Private Network Architectures
System High Interconnections
IP Layering Encryption Methods
Reverse Tunneling Placement of Cryptologic Mechanisms
Use Case 4 - Collaborative LAN's with Public Network Connections
SIP Network
Relationship Between Media Gateway Control Protocol and H.323 or SIP
Voice over ATM
Voice over Frame Relay
Integrating a VoIP Capability onto and Existing Network
Defend the Enclave Boundary
Enclave Boundary Environment
Application Gateway
Dual-Homed Firewall Architecture
Screened Host Firewall Architecture
Screened Subnet Firewall Architecture
Use Case 1 - Private to Public Network Communications
Use Case 2 - Remotely Accessing a Private Network
Use Case 3 - Private Network Connectivity via a Lower-Level Network
Typical Remote Access Environment
Seven Procedures
Requirements Hierarchy
Requirements: Needs Versus Solution
PNE Within the INFOSEC Business
SE (and ISSE) Process
Protection Profile
DITSCAP Subprocesses of Phase 1 - Definition
Risk Management
Information Management Model
IDEF Model
IDEF Model Example
IDEF With Buffers and Release
IDEF Modified
Structured Analysis Model
Types of Harm to Information
Sources of Potentially Harmful Events
Adversaries
Information Threat
Map Type of Harm to Security Service
Template for Report to PNE