scope:

The document is split into two main sections. Firstly, the document describes a process for performing a technical assessment of a specific infrastructure, including the technical requirements, failure mode handling, and data quality requirements. Secondly, the document describes a process for performing an assessment of the key capabilities of an organization that is designing, implementing, maintaining, or operating an infrastructure.

Knowledge of both organizational maturity and system design and operational monitoring is required in order to have confidence that the infrastructure will keep producing quality data over time. Hence, these two assessments together serve to establish confidence that the infrastructure is designed and operated in accordance with the requirements and allows for a controlled risk with respect to dependency on and usage of data.

The methodology allows the risk of using data from the infrastructure and relevant mitigating actions to be identified.

The method does not address any reverse risk that data use may theoretically have on the infrastructure, or how the infrastructure may impact the object it monitors.