Guide to Conducting DHHS In-Depth Major Information System Reviews

摘要

Chapter 2 of this Guide describes the self-assessment methodology, including the selection of systems for self-assessment and the development of a system risk factor profile. Appendix A contains self-assessment surveys to be completed by system managers, users, and technical staff to identify high-risk systems that are under development or undergoing major enhancement. Similarly, Appendix B contains self-assessment surveys for use in identifying high-risk operational systems. Appendix C provides a format for the system manager to use in documenting basic information about the system under review. Appendix D is used to record the life cycle documentation used in the review.