2.5.2. Section 2: Threat Summary. No change from a regular ICD to the threat summary of the IS-ICD; however, the Sponsor should strongly consider the cyber threats posed to an IS solution.

For reference or comparison, below is what the JCIDS Manual says for the ICD 2021 itself:

2.5.3.5. Cite any related CIPs, either as approved CIPs or as proposed new CIPs for review and approval in conjunction with ICD validation.

2.5.3.5.1. CIPs will be included for capabilities in development that are determined to be threat-sensitive. For an ICD, CIPs should be tied to the threat assumptions behind the gap analysis.

2.5.3.5.2. Sponsors should consult with DIA/TLA and the supporting Service- level intelligence element during the development of the requirement to determine if a capability is threat-sensitive.

2.5.3.5.3. CIPs (IAW Reference [37]) are defined as a threat capability or threshold established collaboratively by the requirements sponsor and the capability developer, changes to which could critically impact the effectiveness and survivability of the proposed system.