| Secure by Design

< Back

Secure by Design Foundation Assessment

1 2 3 4

Show - Original MOD questions

Does the capability have a formal process for escalating risks it cannot treat?

MOD: There is a documented process for escalating risks to, and beyond, the Senior Responsible Owner (SRO).

No Yes

Yes

Has the capability assessed supply chain risks at every stage in the lifecycle?

MOD: The project/programme/capability continually reviews how its potential supply chain presents security risks, opportunities and constraints.

No Yes

Yes

Has the capability created and maintained a comprehensive asset list ?

MOD: The project/programme/capability understands the assets (refer to glossary), and can identify critical assets, that are in scope. Mechanisms are in place to review as the project/programme/capability matures.

No Yes

Yes

Do assets include conceptual as well as physical?

MOD: The criticality level of loss of an asset is understood.

No Yes

Yes

Have the capability's assets been valued?

MOD: The relationship between assets and the business/mission objectives is understood.

No Yes

Yes

Has the capability been given a clear scope for decision making set by the risk owner?

MOD: The Authorisation Boundary (refer to glossary) is clearly defined and includes capabilities and organisations (MOD and other) that support the mission/business objectives of the project/programme/capability.

No Yes

Yes

Is the capability scope agreed with other capabilities in your environment (i.e. dependent capabilities and those that work alongside)?

MOD: The Authorisation Boundary (refer to glossary) is agreed with the Senior Responsible Owners (SRO) of adjacent projects/programmes/capabilities.

No Yes

Yes

Has the capability identified the classifications that will be stored, processed or transmitted?

MOD: The project/programme/capability has identified the types of information to be processed, stored, and transmitted by the capability.

No Yes

Yes

Has the capability identified information types that will be stored, processed or transmitted?

MOD:-

No Yes

Yes

Has the capability agreed the information types with the risk owners?

MOD: The identified information types have been confirmed by the Information Asset Owners in accordance with JSP 441.

No Yes

Yes

1 2 3 4

Information

Video Title

Timeout

Automatic Exit

1:00

Would you like to continue with your Secure bt Design Foundation Assignment

@2024bee.net

Bee.net is trading name of
Bee-net Services Limited
Registered in England and Wales, no 09019437
Registered address st. Stephens House, Arthur Road,
Windsor, Berkshire, England, SL4 1RU