Page History

All new information systems require that three forms that the following forms be completed to establish an information system's security-impact rating, authentication requirements, and privacy implications, and mission criticality:

• FIPS-199 System Security Impact Categorization
• e-Authentication Threshold and the e-Authentication Risk Analysis (eTA and eRA)
• Privacy Impact Assessment (PIA)
• Business Impact Analysis (BIA)

We refer to these forms collectively as the "system security starter kit" because they should be they need to be completed before any other security compliance work begins. The information needed for these forms also helps define a system’s security and privacy requirements.  The starter kit is a precursor to the formal FISMA authorization that is required prior to a system going live.

...