Full CA Model
Sheet.277
CFF Container
Sheet.2
Sheet.3
NIST Criticality Analysis
NIST Criticality Analysis
Swimlane List
Swimlane
Sheet.6
Sheet.7
A. Criticality Analysis Procedure Definition
A. Criticality Analysis Procedure Definition
Swimlane (vertical).102
Sheet.9
Sheet.10
B. Conduct Program-Level Criticality Analysis
B. Conduct Program-Level Criticality Analysis
Swimlane (vertical).265
Sheet.12
Sheet.13
C. Conduct System/Subsystem-Level Criticality Analysis
C. Conduct System/Subsystem-Level Criticality Analysis
Swimlane (vertical).269
Sheet.15
Sheet.16
D. Conduct Component/Subcomponent-Level Criticality Analysis
D. Conduct Component/Subcomponent-Level Criticality Analysis
Swimlane (vertical)
Sheet.18
Sheet.19
E. Conduct Detailed Review of Criticality for Processes B, C,...
E. Conduct Detailed Review of Criticality for Processes B, C, and D
Phase List
Separator
Sheet.22
Sheet.23
Alternating
Sheet.205
Sheet.206
Sheet.207
Key
Sheet.208
Key
Sheet.281
Iterate as needed
Iterate as needed
Sheet.24
Iterate as needed
Iterate as needed
Sheet.25
Iterate as needed
Iterate as needed
Decision
Do Adequate Documented Procedures Exist?
Do Adequate Documented Procedures Exist?
Process
A.1 Define/Tailor Criticality Analysis Procedures
A.1Define/Tailor Criticality Analysis Procedures
Dynamic connector.49
Yes
Yes
Dynamic connector.50
No
No
Process.111
B.1 Define or Obtain Program-Level Needs, Goals, Objectives, ...
B.1 Define or Obtain Program-Level Needs, Goals, Objectives, Assumptions and Constraints
Process.173
B.2 Design, Document, or Obtain High-level Processes and Defi...
B.2 Design, Document, or Obtain High-level Processes and Define Detailed Workflow Paths, Boundaries, and Organizational Responsibilities
Process.175
B.3 Identify Dependencies Within the Program Process
B.3 Identify Dependencies Within the Program Process
Process.177
B.5 Assign Baseline Criticality Levels to Workflow Path(s)
B.5 Assign Baseline Criticality Levels to Workflow Path(s)
Document.258
Contingency Plan
Contingency Plan
Document.261
Relevant Laws, Regulations, Directives, etc.; Strategic Plan(...
Relevant Laws, Regulations, Directives, etc.; Strategic Plan(s); Risk Management Strategy; Budgets; Project Plan(s)
Process.283
C.1 Scope/Frame Analysis to a Critical Workflow Path
C.1 Scope/Frame Analysis to a Critical Workflow Path
Document.284
Risk Management Strategy; Contingency Plan; FIPS 199 Impact L...
Risk Management Strategy; Contingency Plan; FIPS 199 Impact Level; and HVA designations
Document.289
Existing Infrastructure and Processes
Existing Infrastructure and Processes
Process.291
C.2 Identify Functionalities and Capabilities Needed and What...
C.2 Identify Functionalities and Capabilities Needed and What System(s)/Subsystem(s) Will be Used
Dynamic connector.293
Process.295
C.3 Identify Dependencies within the System(s)/Subsystem(s) t...
C.3 Identify Dependencies within the System(s)/Subsystem(s) to be Used
Dynamic connector.300
Process.302
C.5 Assign Baseline Criticality Levels to System(s)/Subsystem...
C.5 Assign Baseline Criticality Levels to System(s)/Subsystem(s)
Dynamic connector.303
Custom 1.311
Baseline Criticality for Each Analyzed System(s)/Subsystem(s)
Baseline Criticality for Each Analyzed System(s)/Subsystem(s)
Process.325
D.1 Scope/Frame Analysis to a System/Subsystem
D.1 Scope/Frame Analysis to a System/Subsystem
Process.328
D.2 Identify System Functions and Capabilities Needed and Wha...
D.2 Identify System Functions and Capabilities Needed and What Component(s)/Subcomponent(s) Will be Used
Process.331
D.3 Match Components/Subcomponents to System Function(s)/Capa...
D.3 Match Components/Subcomponents to System Function(s)/Capability(ies)
Process.333
D.5 Assign Baseline Criticality Levels to Components/ Subcomp...
D.5 Assign Baseline Criticality Levels to Components/ Subcomponents
Document.343
Existing Documentation; System Design Process; Architecture D...
Existing Documentation; System Design Process; Architecture Diagrams
Dynamic connector.346
Dynamic connector.348
Dynamic connector.352
Custom 1.360
Function Diagram with Workflow Paths
Function Diagram with Workflow Paths
Custom 1.362
Baseline Criticality Levels of Component(s)/ Subcomponent(s)
Baseline Criticality Levels of Component(s)/ Subcomponent(s)
Start/End
End
End
Start/End.388
Start Criticality Analysis (CA) Procedure Definition
Start Criticality Analysis (CA) Procedure Definition
Dynamic connector
Start/End.394
End Definition
End Definition
Start/End.411
Start Program Level CA
Start Program Level CA
Decision.267
Have CA Procedures Been Defined?
Have CA Procedures Been Defined?
Subprocess.268
CA Procedure Definition (Process A)
CA Procedure Definition (Process A)
Dynamic connector.269
No
No
Dynamic connector.419
Dynamic connector.421
Dynamic connector.424
Yes
Yes
Custom 1.195
Process Description and/or Diagram
Process Description and/or Diagram
Custom 1.196
Baseline Criticality Level for Each Analyzed Workflow Path
Baseline Criticality Level for Each Analyzed Workflow Path
Dynamic connector.434
Start/End.437
End
End
Start/End.450
Start System/Subsystem Level CA
Start System/Subsystem Level CA
Decision.452
Has Baseline Criticality Been Assigned in Process B?
Has Baseline Criticality Been Assigned in Process B?
Dynamic connector.453
Subprocess.454
Conduct Program-Level Criticality Analysis (Process B)
Conduct Program-Level Criticality Analysis (Process B)
Dynamic connector.455
No
No
Dynamic connector.458
Yes
Yes
Dynamic connector.459
Dynamic connector.461
Start/End.462
End
End
Start/End.476
Start Component/Subcomponent Level CA
Start Component/Subcomponent Level CA
Decision.478
Has Baseline Criticality been assigned in Process C?
Has Baseline Criticality been assigned in Process C?
Subprocess.479
Conduct System/Subsystem- Level Criticality Analysis (Process...
Conduct System/Subsystem- Level Criticality Analysis (Process C)
Dynamic connector.480
No
No
Dynamic connector.483
Yes
Yes
Dynamic connector.485
Dynamic connector.548
Dynamic connector.558
Dynamic connector.567
Dynamic connector.577
Document.590
Documented CA Procedures (Process A)
Documented CA Procedures (Process A)
Custom 1.603
Documented CA Procedures
Documented CA Procedures
Document.616
Relevant Laws, Regulations, Directives, etc.
Relevant Laws, Regulations, Directives, etc.
Dynamic connector.618
Dynamic connector.621
Process.658
B.4 Define Operating States
B.4 Define Operating States
Dynamic connector.661
Dynamic connector.687
Dynamic connector.691
Dynamic connector.694
Dynamic connector.698
Dynamic connector.700
Process.701
C.4 Define Operating States
C.4 Define Operating States
Dynamic connector.703
Process.705
D.4 Define Operating States
D.4 Define Operating States
Dynamic connector.707
Document.712
Criticality Levels of Workflow Path(s)
Criticality Levels of Workflow Path(s)
Document.716
Criticality Levels of System(s)/Subsystem(s)
Criticality Levels of System(s)/Subsystem(s)
Dynamic connector.724
Dynamic connector.726
Dynamic connector.742
Dynamic connector.747
Dynamic connector.748
Process.305
E.1 Identify and Map Connections and Dependencies Across Comp...
E.1 Identify and Map Connections and Dependencies Across Components/ Subcomponents, Systems/Subsystems, and Program(s)
Process.505
E.5 Assign Final Criticality Levels to Programs, Systems, Sub...
E.5 Assign Final Criticality Levels to Programs, Systems, Subsystems, Components, and Subcomponents
Document.314
Existing Documentation; System Design Process
Existing Documentation; System Design Process
Document.209
Root Cause Analysis; Hazard Analysis; Contingency Plan
Root Cause Analysis; Hazard Analysis; Contingency Plan
Document.210
Risk Assessment (esp. Threat Assessment; Vulnerability Assess...
Risk Assessment (esp. Threat Assessment; Vulnerability Assessment, Impact Analysis)
Dynamic connector.769
Dynamic connector.771
Start/End.778
Start Review of Risk and CA
Start Review of Risk and CA
Decision.782
Has Baseline Criticality been Determined in Processes B, C an...
Has Baseline Criticality been Determined in Processes B, C and D?
Subprocess.783
Conduct Program (Process B); System/Subsystem (Process C); Co...
Conduct Program (Process B); System/Subsystem (Process C); Component/Subcomponent (Process D)-Level Criticality Analysis
Dynamic connector.784
Dynamic connector.785
No
No
Dynamic connector.786
Yes
Yes
Process.1159
E.2 Identify Controls Protecting the System to be Used
E.2 Identify Controls Protecting the System to be Used
Process.1160
E.3 Review Impact of Operating States
E.3 Review Impact of Operating States
Dynamic connector.1170
Dynamic connector.1171
Dynamic connector.1172
Dynamic connector.1388
Start/End.1391
End
End
Dynamic connector.1393
Dynamic connector.187
Dynamic connector.196
Document.197
Baseline Criticality for Processes B, C, and D
Baseline Criticality for Processes B, C, and D
Dynamic connector.198
Custom 1.322
Finalized Criticality for Each Analyzed System(s)/Subsystem(s)
Finalized Criticality for Each Analyzed System(s)/Subsystem(s)
Custom 1.366
Finalized Criticality for Each Analyzed System Component(s)/ ...
Finalized Criticality for Each Analyzed System Component(s)/ Subcomponent(s)
Dynamic connector.201
Dynamic connector.202
Sheet.210
Start / end of a process / sub-process Decision point Process...
Start / end of a process / sub-processDecision pointProcessProcess / sub-processDocuments used as inputs to the process / sub-processOutput of a step or process / sub-processIterative feedback: The sub-processes may be repeated multiple times in order to get the level of detail needed.
Start/End.214
Sheet.216
Process.217
Subprocess.219
Document.220
Custom 1.221
Sheet.223
Decision.224
Process.227
E.4 Validate, Apply and Trace any Available Risk Information ...
E.4 Validate, Apply and Trace any Available Risk Information Through Connections and Dependencies
Dynamic connector.228
Dynamic connector.231