Framework connections explain relevant planning considerations, not a certification or a finding that a rule applies. Confirm scope and obligations with accountable stakeholders. Explore the ten framework references.
Security
Coordinate protection of public-service systems
Security teams lack consistent visibility across essential service applications.
Approach
Map critical services to identity, endpoint, and cloud coverage and establish detection and response ownership.
Deliverables
- Security coverage assessment
- Prioritized operating and response plan
Success measures: Coverage gaps, investigation quality, and remediation age.
Requirements to consider
Confirm jurisdiction, hosting, and access requirements before implementation.
Security
Govern collaboration and public records
Records have inconsistent ownership, classification, and lifecycle treatment.
Approach
Map information categories to approved handling and retention requirements, then pilot controls and evidence processes.
Deliverables
- Records handling and ownership model
- Staged policy and evidence plan
Success measures: Owner coverage and unresolved retention exceptions.
Requirements to consider
Records and legal teams determine disclosure, retention, and hold obligations.
Framework connections
- CJIS Security PolicyIf collaboration includes criminal justice information, confirm the governing CJIS revision, agency agreements, approved services, and handling evidence with the responsible authority.
AI Business Solutions
Improve access to approved service guidance
Staff and residents struggle to find current service information.
Approach
Design accessible, source-grounded assistance over approved public guidance with escalation and content ownership.
Deliverables
- Accessible knowledge experience
- Quality, language, and escalation evaluation
Success measures: Source accuracy, task completion, and escalation quality.
Requirements to consider
Do not automate eligibility, enforcement, or other consequential public decisions.
Cloud & AI
Unify service-performance reporting
Departments use inconsistent definitions to measure service delivery.
Approach
Build governed data products with agreed measures, minimization, access controls, and documented lineage.
Deliverables
- Shared reporting definitions
- Data-platform and quality blueprint
Success measures: Data quality and reporting preparation effort.
Requirements to consider
Avoid unnecessary personal-data joins and unsupported individual profiling.
Cloud & AI
Establish governed cloud landing zones
Departments adopt cloud services with inconsistent platform ownership and policy.
Approach
Define a shared Azure foundation with appropriate identity, network, logging, policy, and subscription responsibilities.
Deliverables
- Landing-zone architecture and design decisions
- Platform onboarding and policy backlog
Success measures: Baseline coverage and environment-readiness gaps.
Requirements to consider
Validate jurisdiction-specific residency, procurement, authorization, and supported cloud availability.
Framework connections
- CISA ZTMMUse the five pillars and cross-cutting governance to connect cloud identity, network, workload, and data boundaries to agency-approved priorities.
AI Business Solutions
Route administrative casework transparently
Administrative requests move between teams without clear ownership or status.
Approach
Map approved case-administration steps, connect authorized records, and route tasks with documented decisions and escalation.
Deliverables
- Case-administration workflow
- Ownership and evidence requirements
Success measures: Case age, handoff volume, and task completion quality.
Requirements to consider
Do not automate eligibility, enforcement, or other consequential public decisions.
AI Business Solutions
Prepare staff for controlled document drafting
Staff want AI assistance with internal documents but lack consistent readiness guidance.
Approach
Select low-risk administrative tasks, review approved information access, and pilot drafting with source verification and publication review.
Deliverables
- Copilot readiness and adoption plan
- Draft-review and acceptable-use guidance
Success measures: Output quality, readiness gaps, and correction effort.
Requirements to consider
Authorized officials review policy statements, public communications, and sensitive records before use.
Security
Review cross-agency and contractor access
Shared initiatives leave unclear sponsorship and excessive access after roles change.
Approach
Assign sponsors, inventory in-scope access, and define periodic reviews and retirement triggers for external identities.
Deliverables
- External-access and sponsorship assessment
- Review and deprovisioning runbooks
Success measures: Sponsor coverage and overdue access reviews.
Requirements to consider
Interagency sharing agreements and legal access requirements determine permitted collaboration.
Framework connections
- CISA ZTMMUse identity governance and visibility to track sponsors, access reviews, and retirement of cross-agency permissions.
- CJIS Security PolicyWhere cross-agency or contractor access reaches criminal justice information, validate authorized roles, personnel requirements, and the relevant agency agreements.
No matching use cases
Try a broader topic, framework, or Technology, or clear the filters.