Critical Program Information (CPI) Identification and Assessment Tool

TSA will assess the feasibility of developing or modifying an existing application-based process for creating: a) A functional architecture of a system to identify system missions, mission threads, and Critical Functions (mission model), and b) A physical architecture of a system (system model) in a manner consistent with both TSN Criticality Analysis and the Cybersecurity Risk Assessment Implementation Guide. TSA will develop a concept for an application-based process that: • Follows a CPI Taxonomy focused on identifying organically developed critical enabling technologies • “Weeds out” overtly non-CPI hardware and software items based on information provided during system model development (i.e. Unmodified, COTS hardware or software; items of foreign manufacture) • Through an improved series of objective criteria, aids System Security Engineers in identifying candidate CPI • Creates a consistent, searchable repository of CPI assessments • Provides a tool that searches existing CPI data repositories, using identified system elements from the system model, to identify inherited CPI or technologies requiring horizontal protection.