US Federal Enterprise Architecture Framework Version 2 (FEAF v2) FEAF-Security-Reference-Model: Use of the Security Reference Model and mandatory protections

What does FEAF-Security-Reference-Model require?

Agencies must apply the SRM across every sub-architecture view, as a taxonomy for controls and as a risk based method that brings together the NIST Risk Management Framework with the system development life cycle, with continuous monitoring in place. Security and privacy protection for federal information and systems is mandatory, and the architecture must address confidentiality, integrity and availability under FIPS 199 and the eight privacy principles, bringing both concerns into decisions early.