Information Assurance Handbook: Effective Computer Security and Risk Management Strategies

CHAPTER 15

Information Assurance in System Development and Acquisition

An emerging trend in software engineering is the consideration of the information assurance requirements during system design and development. Integrate secure design into all stages of system development to ensure appropriate protection. As with other aspects of system development, countermeasures are most effective when planned and managed from the initial planning phase up to the disposal phase. This was introduced in Chapter 2 as part of the MSR model.

This chapter provides an overview of how to integrate information assurance requirements into each stage of the system development life cycle (SDLC) to ensure producing a secure system. This chapter also explains the role ...