Trade-offs to establish an integrated, comprehensive protection scheme Figure 1: Program Protection Focus Areas Information Technology Components What to Protect : Information on the system and about the program How to Protect: Classification Export Controls Information Security RMF for DoD IT Goal: Ensure key system and program data are protected from adversary collection What to Protect: A capability element that contributes to the warfighters’ technical advantage (CPI) How to Protect: Anti-Tamper Exportability Features Goal: Prevent the compromise and loss of CPI What to Protect : Mission-critical functions and components How to Protect: Software Assurance Hardware Assurance/Trusted Microelectronics Supply Chain Risk Management Anti-Counterfeits Goal: Protect key mission-critical components from malicious activity Trade-offs to establish an integrated, comprehensive protection scheme