Development
Information Systems are defined not only by what they represent and what they accomplish, but also by how we develop the systems in a secure and efficient manner.
Is there an Optimisation Function?
Developing systems could simply be a process of defining the optimisation function, although this assertion has an awful lot of assumptions behind it. If This could simply be the optimisation of cost and
effort. One of the inputs to the optimisation function must be an element of
risk. Into this function we need to decide to what extent we want to employ
checkers.
How Do We Maintain Our Delivered System?
Future maintence of the developed system may be aided by the implementation of audit reports or control reports based on
probes.
What Goes Into The Plan?
Our plan must include the objectives for mapping out the
software design, with a reliance on
softwarelibraries to maximise effort
reuse. We may wish to employ
formal methods tools in order to reduce risk later on.