Method and system for rapid accreditation/re-accreditation of agile it environments, for example service oriented architecture (SOA)

A system for managing and analyzing security requirements, the system comprising:

• a security implementation model reader that is configured to read from a model information source, at least one security implementation model indicating security implementation policy characteristics;
• a requirement model reader that is configured to read from the model information source at least one requirement model indicating requirement policy characteristics in an abstract and reusable form;
• a correspondence analyzer that is configured to at least partially automatically relate the read security implementation model and the read requirements model and at least partially automatically determining a correspondence or non-correspondence between the security implementation model and the requirements model by analyzing correspondence between security implementation policy characteristics and requirements policy characteristics, the correspondence indicating that a requirement defined in the requirement model is met by security policies implemented by controls as indicated by the security implementation model, the at least partially automatically relating the read security implementation model and the read requirements model and the at least partially automatically determining a correspondence between the security implementation model and the requirements model being triggered by a trigger event;
• and a correspondence evidence documenter that is configured to at least partially automatically generate evidence indicating the correspondence or non-correspondence between the security implementation model and the requirements model;
• wherein the correspondence analyzer stores, transmits and/or displays the generated evidence.