Assessment Objectives
In addition to relevant policies, standards and procedures, the assessor shall examine, interview, and/or test to determine if appropriately scoped evidence exists to support the claim that:
- TDA-08.2_A01 the developer of the system, system component or system service is required to provide a description of the functional properties of the controls to be implemented.
Assessment rigor: 1
Origin: 53A_R5_SA-04(01) - TDA-08.2_A02 organization-defined criteria for security-relevant information pertaining to external system interfaces, high-level design, low-level design, source code or hardware schematics and design and implementation information are documented in a System Security & Privacy Plan (SSPP), or similar document.
Defined parameters: at a minimum to include security-relevant external system interfaces; high-level design; low-level design; source code or network and data flow diagram
Assessment rigor: 1
Origin: 53A_R5_SA-04(02)_ODP[01] - TDA-08.2_A03 design and implementation information is defined.
Assessment rigor: 1
Origin: 53A_R5_SA-04(02)_ODP[02] - TDA-08.2_A04 level of detail is defined.
Assessment rigor: 1
Origin: 53A_R5_SA-04(02)_ODP[03] - TDA-08.2_A05 the developer of the system, system component or system service is required to provide design and implementation information for the controls that includes using at level of detail.
Assessment rigor: 1
Origin: 53A_R5_SA-04(02)
Linkitetyt tehtävät
| Linkin tyyppi | Tehtävä |
|---|---|
| blocks | Functional Properties |
- Secure Controls Framework -
EN: GRCA includes the Secure Controls Framework® (SCF) content, © Secure Controls Framework Council, LLC, used under the Creative Commons Attribution-NoDerivatives 4.0 International Public License. SCF control numbers, names, descriptions and mappings appear exactly as published by the SCF Council – https://securecontrolsframework.com. GRCA may group or reorder SCF content for display, which does not change SCF content; the mappings are shown as links to the frameworks they name. Learn more at https://securecontrolsframework.com.
DE: GRCA enthält Inhalte des Secure Controls Framework® (SCF), © Secure Controls Framework Council, LLC, genutzt unter der Creative Commons Attribution-NoDerivatives 4.0 International Public License. Nummern, Namen, Beschreibungen und Zuordnungen der SCF-Controls erscheinen genau so, wie der SCF Council sie veröffentlicht – https://securecontrolsframework.com. GRCA gruppiert oder sortiert SCF-Inhalte für die Anzeige, ohne sie zu verändern; die Zuordnungen erscheinen als Verknüpfungen zu den genannten Regelwerken. Mehr unter https://securecontrolsframework.com.