CNIQ™

 

Home
Up
IT Compliance
INFOSEC
Training
e-Archiving
About Us
Appearances
Downloads

CNIQ Methodology Overview  

The qualification of the confidential, correct and reliable operation of the CNI is accomplished via a rigorous qualification methodology based upon the following six principles:

bullet

 Atmosphere of compliance

bullet

 Formal system specifications

bullet

 Replication of proven system arrangements

bullet

 Affirmation of qualified vendor claims

bullet

 In-service qualification of systems and components

bullet

Concurrent document and change management

Two key concepts that are included in (and introduced by) the with C3Q Methodology are those of Arrangements and History Records.

An Arrangement is the logical entity comprised of the set of software (or subset of software), setup parameters, specified computer hardware, specified network equipment, and topology that work together to provide the functions of a component or system.

All of this "arranging" is documented in the History Records. There are two types: Configuration History Records (CHR's) and Qualification History Records (QHR's). 

CHRs contain the documents that describe what is physically and logically included in an Arrangement. 

QHRs contain the documentation of all of the tasks that have been performed (and their observations and results) to determine the fitness for operational use of an Arrangement.

The qualification tasks are based on the principles of procedures, organizations, functions, and structures. The procedures and organizations are used to design, install and manage the CNI. The functions and structures of the CNI itself, as a system of components, are continuously qualified through monitoring and testing. All of these activities are audited to ensure compliance of the processes and the documentation of activities and records.

All of these concepts are physically instantiated in Hollis's SPRIITS (Standard Practices for Regulated Infrastructure Information Technology Systems) document set. 

<<BACK>>

 

All content ©2008 The Hollis Group, Inc., Inc. All rights reserved.
For technical questions or comments (including typos), send email to: tquinn@hollisgroup.com