
196 ◾ Appendix E
Business
Attribute Attribute Explanation
Metric
Type
Suggested
Measurement
Approach
Migratable There should be a feasible,
manageable migration path,
acceptable to the business
users, that moves from an old
system to a new one, or from
one released version to the
next.
Soft Independent audit
and review against
Security Architecture
Capability Maturity
Model
2
of technical
architecture
(conceptual, logical,
and physical)
Multisourced Critical system components
should be obtainable from
more than one source to
protect against the risk of the
single source of supply and
support being withdrawn.
Soft Independent audit
and review against ...