Page History
...
1. Categorize the Application
Use the NCI Security Starter Kit for templates and guidance on completing the Federal Information Processing Standard (FIPS)-199 form, the e-Authentication Threshold and Risk Analysis (eTA/eRA) forms, the Privacy Impact Assessment (PIA) and the Business Impact Analysis (BIA). All four of these forms are required to ensure that you properly categorize your application based on its security-impact rating, authentication needs, privacy concerns, and system availability needs. This step is consistent with other types of federal information systems whether hosted internally, externally, or in the cloud.
...