+CON.8.A21 Threat Modelling (S)

CON.8.A21 Threat Modelling (S)

Threat modelling SHOULD be undertaken during the design phase of software development. For this purpose, potential threats SHOULD be identified on the basis of the relevant security profile, the catalogue of requirements, and the planned operational environment or operational scenario. The threats SHOULD be assessed in terms of their probability and impact.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.18 Poor Planning or Lack of Adaptation