Cybersecurity planning activities, including writing the Cybersecurity Strategy annex to the Program Protection Plan, should begin during which phase?

Cybersecurity planning activities, including writing the Cybersecurity Strategy annex to the Program Protection Plan, should begin during which phase?

• A. During the Requirements Analysis Phase
• B. During the Concept Development Phase
• C. During the System Design Phase
• D. During the Material Solution Analysis Phase prior to Milestone A

Answer: (D)

Security planning should start early so protective measures shape the solution and guide risk decisions from the outset. The Material Solution Analysis phase is when multiple candidate solutions are evaluated and the preferred approach is identified, making it the right time to develop the Cybersecurity Strategy annex to the Program Protection Plan in concert with the chosen path. Establishing this before Milestone A ensures cybersecurity considerations are integrated into architecture, budgeting, and design decisions, supporting a coherent plan as the program matures. Delaying cybersecurity planning to later phases can lead to incompatible security requirements, costly redesigns, or protections that don’t align with the actual solution. Starting in the Material Solution Analysis phase prior to Milestone A is the most effective timing.

Security planning should start early so protective measures shape the solution and guide risk decisions from the outset. The Material Solution Analysis phase is when multiple candidate solutions are evaluated and the preferred approach is identified, making it the right time to develop the Cybersecurity Strategy annex to the Program Protection Plan in concert with the chosen path. Establishing this before Milestone A ensures cybersecurity considerations are integrated into architecture, budgeting, and design decisions, supporting a coherent plan as the program matures. Delaying cybersecurity planning to later phases can lead to incompatible security requirements, costly redesigns, or protections that don’t align with the actual solution. Starting in the Material Solution Analysis phase prior to Milestone A is the most effective timing.