DCII-1 IA Impact Assessment
Overview
Changes to the DoD information system are assessed for IA and accreditation impact prior to implementation.
| MAC / CONF | Impact | Subject Area |
|---|---|---|
| MACI MACII MACIII | Medium | Security Design and Configuration |
Details
| Threat |
|---|
| Arbitrary changes to DoD information systems have the potential to affect not only the primary system but any interconnected system as well. All changes must be analyzed for IA and accreditation impact prior to implementation to maintain system stability and accreditation. |
| Guidance |
|---|
| 1. A formal process that identifies changes that will affect IA and accreditation impact shall be developed. 2. The CCB and the DIACAP Team shall work together to assess system changes for IA and accreditation impact prior to implementation. |
References
- DoDI 8500.2, Information Assurance (IA) Implementation, para. E3.3.8, 06 February 2003
- ANSI/EIA-649 Configuration Management, “National Consensus Standard for Configuration Management”, July 1998