Constraint Tree Analysis : A Method to Evaluate Threats to Technology Policy Goals

There is always a risk that a public policy will be unsuccessful. Policy failure can be the result of poorly written policy whose implementation measures are not aligned with the intended goals. It can also be a result of unexpected constraints that impede policy implementation. There are many guides offering advice on how to write good policy and establish policy goals, yet there is no established preemptive method for anticipating policy implementation constraints or other barriers to policy success. This article proposes a new method called constraint tree analysis for evaluating the obstacles to policy implementation before a policy is enacted. The method builds on an established mechanism in aerospace engineering and computer science that enumerates possible failure points or attack vectors of systems. Constraint tree analysis is illustrated in this article by using it to identify possible implementation obstacles of U.S. Executive Order 13636 – Improving Critical Infrastructure Cybersecurity