+SA-08(17) Secure Distributed Composition

SA-08(17) Secure Distributed Composition

Control

Implement the security design principle of secure distributed composition in [Assignement: systems or system components].

Discussion

The principle of secure distributed composition states that the composition of distributed components that enforce the same system security policy result in a system that enforces that policy at least as well as the individual components do. Many of the design principles for secure systems deal with how components can or should interact. The need to create or enable a capability from the composition of distributed components can magnify the relevancy of these principles. In particular, the translation of security policy from a stand-alone to a distributed system or a system-of-systems can have unexpected or emergent results. Communication protocols and distributed data consistency mechanisms help to ensure consistent policy enforcement across a distributed system. To ensure a system-wide level of assurance of correct policy enforcement, the security architecture of a distributed composite system is thoroughly analyzed.

Assessment Objective

[Assignement: systems or system components] implement the security design principle of secure distributed composition.

Assessment Method

Examine

System and services acquisition policy procedures addressing the security design principle of secure distributed composition used in the specification, design, development, implementation, and modification of the system system design documentation security and privacy requirements and specifications for the system system security and privacy architecture system security plan other relevant documents or records

Interview

Organizational personnel with the responsibility for determining system security and privacy requirements organizational personnel with system specification, design, development, implementation, and modification responsibilities system developers organizational personnel with information security responsibilities

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

Požadavky

3. Související regulace

Regulace

Propojené úkoly

Vazby
is blocked by SA-08(17) Secure Distributed Composition – Assessment Procedure