+SC-03(04) Module Coupling and Cohesiveness
|
SC-03(04) Module Coupling and Cohesiveness
Control
Implement security functions as largely independent modules that maximize internal cohesiveness within modules and minimize coupling between modules.
Discussion
The reduction of inter-module interactions helps to constrain security functions and manage complexity. The concepts of coupling and cohesion are important with respect to modularity in software design. Coupling refers to the dependencies that one module has on other modules. Cohesion refers to the relationship between functions within a module. Best practices in software engineering and systems security engineering rely on layering, minimization, and modular decomposition to reduce and manage complexity. This produces software modules that are highly cohesive and loosely coupled.
Assessment Objective
- security functions are implemented as largely independent modules that maximize internal cohesiveness within modules;
- security functions are implemented as largely independent modules that minimize coupling between modules.
Assessment Method
Examine
System and communications protection policy
procedures addressing security function isolation
system design documentation
system configuration settings and associated documentation
system audit records
system security plan
other relevant documents or records
Interview
System/network administrators
organizational personnel with information security responsibilities
1. Přehled
1.1 Odkazy
1.2 Identifikované požadavky
1.3 Související regulace
2. Identifikované požadavky
Požadavky
| Zdroj |
Požadavek |
3. Související regulace
Propojené úkoly
|