
58 ◾ Information Security Fundamentals
Figure 4.9 gives direction on filling out the pre-FRAAP meeting checklist.
By completing this checklist, the elements for the project scope statement will
be nearly complete. Two of the key elements contained in the checklist, and that
must be part of the project scope statement, are the categories of assumptions and
constraints. It is important that we understand what these are and how they affect
the risk assessment process.
Issue Activity
Before the Meeting
1. Date of Pre-FRAAP Meeting Record the date the actual pre-FRAAP meeting
occurred
2. Project Executive Sponsor or Owner Record the full name and proper ...