process ▁was ▁mode led ▁using ▁the ▁meta - model ing ▁technique . ▁The ▁d otted ▁ar rows ▁running ▁from ▁the ▁meta - process ▁diagram ▁( left ) ▁to ▁the ▁meta - data ▁diagram ▁( right ) ▁indicate ▁which ▁concepts ▁are ▁created / ▁adjust ed ▁in ▁the ▁corresponding ▁activities . ▁All ▁of ▁the ▁activities ▁in ▁the ▁evaluation ▁phase ▁are ▁standard ▁activities . ▁For ▁a ▁short ▁description ▁of ▁the ▁E valu ation ▁phase ▁concepts ▁see ▁Table ▁ 2 . 4 . 2 ▁where ▁the ▁concepts ▁are ▁listed ▁and ▁defined . ▁ ▁Table ▁ 2 . 4 . 2 : ▁Con cept ▁and ▁definition ▁evaluation ▁sub - process ▁Security ▁management ▁ ▁Main ten ance ▁ ▁Because ▁of ▁organiz ational ▁and ▁IT - in frastr ucture ▁changes , ▁security ▁ris ks ▁change ▁over ▁time , ▁requiring ▁revis ions ▁to ▁the ▁security ▁section ▁of ▁service ▁level ▁agre ements ▁and ▁security ▁plans . ▁ ▁Main ten ance ▁is ▁based ▁on ▁the ▁results ▁of ▁the ▁E valu ation ▁sub - process ▁and ▁insight ▁in ▁the ▁changing ▁ris ks . ▁These ▁activities ▁will ▁produce ▁propos als . ▁The ▁propos als ▁either ▁serve ▁as ▁inputs ▁for ▁the ▁plan ▁sub - process ▁and ▁travel ▁through ▁the ▁cycle ▁or ▁can ▁be ▁adopted ▁as ▁part ▁of ▁maintain ing ▁service ▁level ▁agre ements . ▁In ▁both ▁cases ▁the ▁propos als ▁could ▁lead ▁to ▁activities ▁in ▁the ▁action ▁plan . ▁The ▁actual ▁changes ▁are ▁made ▁by ▁the ▁Change ▁Management ▁process . ▁ ▁Figure ▁ 2 . 5 . 1 ▁is ▁the ▁process - data ▁diagram ▁of ▁the