FISMM architecture

4. The FISMM architecture is designed to enable determination of maturity in a FIU environment. The model has two dimensions, called “Domain” and “Maturity level” to clearly segregate basic characteristics of the key domains from its institutionalization characteristics. The domain dimension of the model covers all main domains or process areas in FIU environment (Refer Figure 1). The prefix FD in domain code stands for FISMM Domain. The domains FD01 to FD11 are FIU specific whereas domains FD12 to FD15 cover IT implementation in general.

	Maturity Level 1	Maturity Level 2	Maturity Level 3	Maturity Level 4	Maturity Level 5
FD01 - Collection of reports
FD02 - Access to information
FD03 - Processing of information
FD04 - Detection of new targets
FD05 - Operational analysis
FD06 - Strategic analysis
FD07 - Domestic Cooperation
FD08 - International Cooperation
FD09 - Registration of reporting officer
FD10 - Capacity building of reporting entities
FD11 - Managing compliance of reporting entities
FD12 - Performance management
FD13 - Information management
FD14 - Technical infrastructure management
FD15 - Information security management

Figure 1: FISMM matrix

5. The capability dimension indicates process management and institutionalization capability for each domain. The description of various maturity levels is given in Figure 2.

Maturity Level	Definition	Assessment
Maturity Level 1	Initial	Performed in adhoc manner
Maturity Level 2	Repeatable	Processes follow a regular pattern
Maturity Level 3	Defined	Processes are documented and communicated
Maturity Level 4	Managed	Processes are monitored and measured
Maturity Level 5	Optimized	Culture of continuous improvement to sustain the gains

Figure 2: Definition of Maturity Levels

6. Each FISMM domain has a set of goals, goal indicators, base practices list, and related technology list. The general format of the FISMM is shown in Figure 3 below.

FD01 - Domain Title Description - An overview of the domain Goals - A list indicating the desired results of implementing this process area Goal indicators - Measure of whether goals are being achieved Base Practices List - A list showing the number and name of each base practice Related Technology List - A list of related Technology / COTS product / solution Notes - Any other notes about this domain   Base Practices FD.01.01 - Base Practice Title Name - A sentence describing the base practice Description - An overview of this base practice Example Work Products - A list of examples illustrating some possible output Notes - Any other notes about this base practice   FD.01.02...   Related Technology FT.01.01 - Title of Technology / Product / Solution Name - A sentence describing the Technology / Product / Solution Description - An overview of Technology / Product / Solution Functionalities List - A list showing list of functionalities of Technology / Product / Solution Implementation notes - Implementation notes about this Technology / Product / Solution   FT.01.02...  

Figure 3 - FISMM Format

7. Each domain in FISMM includes base practices which must be successfully implemented to accomplish the purpose of the domain they support. Under each base practice of the domain, the description of the base practice, example work products, and notes (covering related best practices) has been mentioned. The maturity level for the domain is based on adoption of base and best practices in terms of coverage (i.e. whether practices are followed) and maturity level (i.e. whether activities are performed in adhoc manner or processes are monitored and measured).

8. Each domain also includes details of required technologies / products / solutions related to the domain. Each technology / product / solution is described following the base practices details. The ‘Functionalities List’ identifies standard functionalities which are generally supported by Commercial off the shelf (COTS) products or generic software solutions. The degree of match of the required functionalities’ with the product features (whether standard product feature, customisation required, supports third party software, not supported) is an important criteria in evaluation and selection of appropriate software product and technology.

Дата добавления: 2015-11-14