Information Security Handbook

Purpose and description of the information system

Clearly document the purpose of the system from a business perspective. In the example of a document management system, you would want to show what business need is being fulfilled. If your organization is utilizing a project management framework then you can use the information that will come out of the project chartering process to obtain this information. Otherwise, you will need to interview the business and IT stakeholders to gather this information.

• Business purpose: Implement a document management system to store manufacturing plans and diagrams in a secure and searchable fashion.
• System description: If your organization knows how they are going to implement the business purpose statement ...