The P3IF: Properties, Processes, and Perspectives Inter-Framework

Requirements engineering frameworks have historically been developed in the context of cybersecurity and have tended to focus almost exclusively on the technical and operational aspects of data security. Now, however, frameworks are being stretched to support interdisciplinary and multiorganizational information systems, requirements, and risks, securing downstream processes such as data analytics and balancing cross-domain priorities and perspectives. In this paper, we (i) explore the purpose of frameworks and their function in facilitating requirements engineering in information systems, (ii) perform an analysis of the relationships and lineages of common frameworks in professional use today, and (iii) propose the Properties, Processes, and Perspectives Inter-Framework (P3IF). P3IF enables flexible requirements engineering for complex information systems by providing a modular abstraction layer between existing frameworks, extending their value without replacing them. Factors from frameworks used across disparate domains are multiplexed to harmonize vocabularies and narratives across different organizations and needs, to create new approaches to managing information risk, and to enhance the cognitive security of decisions-makers by expanding security considerations beyond cybersecurity to include the entire information pipeline from sourcing to semantics.

Overview source: Curated paper metadata.