Information Assurance at Central Design Activities
Abstract
For the purpose of this evaluation, a Central Design Activity is defined as a designated organization (or segment thereof) within a component that, at a minimum, has responsibility for designing, converting, coding, testing, documenting, or subsequently maintaining or modifying computer operating or applications software for use at more than one location. For this evaluation, we visited an Army, a Navy, and an Air Force Central Design Activity. Central Design Activities use software development environments to develop and maintain the software for which they are responsible. A software development environment is an automated information system that provides an integrated suite of tools to aid the development of software in a particular language or for a particular application. This evaluation had two objectives. The first objective was to determine whether information assurance policies and management controls were working to protect the software development environments and software libraries the Central Design Activities use for DoD software development and maintenance. The second objective was to evaluate whether the controls the Central Design Activities have in place ensure that the DoD systems developed and maintained by the Central Design Activities do not contain malicious code.
Document Details
- Document Type
- Technical Report
- Publication Date
- Feb 07, 2001
- Accession Number
- ADA387248
Entities
Organizations
- Office of the Inspector General, U.S. Department of Defense