====== MO-007c — Air-Gapped Environment Operation ======

[[dido:03-dido-te:99-annexes:annex-c-requirements:01-mission-objectives:mo-007:start|Go to MO-007 — Connected, Disconnected, and Air-Gapped Operation]]

===== Statement =====

[[dido:99_annexes:annex-b-terms-and-definitions:d:dido-te|DIDO-TE]] SHALL perform testing operations in an [[dido:99_annexes:annex-b-terms-and-definitions:a:air-gapped_environment|Air-Gapped Environment]] that maintains physical isolation from external networks.

===== Derived From =====

MO-007c derives from [[dido:03-dido-te:99-annexes:annex-c-requirements:01-mission-objectives:mo-007:start|MO-007 — Connected, Disconnected, and Air-Gapped Operation]].

MO-007c specifies the Air-Gapped Environment portion of MO-007.

===== Rationale =====

An Air-Gapped Environment maintains physical isolation from external networks during testing operations.

Air-Gapped Environment operation requires DIDO-TE to conduct tests without an active [[dido:99_annexes:annex-b-terms-and-definitions:e:external_network_connection|External Network Connection]] or access to an [[dido:99_annexes:annex-b-terms-and-definitions:e:external_service|External Service]]. The resources required for test execution must therefore exist within the Air-Gapped Environment before test execution begins.

Authorized transfer processes introduce required testing artifacts, dependencies, configurations, test data, policies, and other resources into the Air-Gapped Environment. Authorized transfer processes also remove [[dido:99_annexes:annex-b-terms-and-definitions:t:test_result|Test Results]], logs, and [[dido:99_annexes:annex-b-terms-and-definitions:e:evidence|Evidence]] after test execution.

Applicable transfer controls preserve the integrity, provenance, and [[dido:99_annexes:annex-b-terms-and-definitions:t:traceability|Traceability]] of transferred content without compromising the physical isolation of the environment.

An Air-Gapped Environment differs from a [[dido:99_annexes:annex-b-terms-and-definitions:d:disconnected_environment|Disconnected Environment]]. A Disconnected Environment lacks active external network connectivity during the applicable operation. An Air-Gapped Environment maintains physical isolation from external networks.

===== Applies To =====

MO-007c applies to:

  * [[dido:99_annexes:annex-b-terms-and-definitions:d:dido-te|DIDO-TE]]
  * [[dido:99_annexes:annex-b-terms-and-definitions:a:air-gapped_environment|Air-Gapped Environments]]
  * [[dido:99_annexes:annex-b-terms-and-definitions:t:test_definition|Test Definitions]]
  * [[dido:99_annexes:annex-b-terms-and-definitions:c:candidate_solution|Candidate Solutions]]
  * [[dido:99_annexes:annex-b-terms-and-definitions:t:test_execution|Test execution]]
  * [[dido:99_annexes:annex-b-terms-and-definitions:e:external_network_connection|External Network Connections]]
  * [[dido:99_annexes:annex-b-terms-and-definitions:e:external_service|External Services]]
  * [[dido:99_annexes:annex-b-terms-and-definitions:t:transfer_bundle|Transfer Bundles]]
  * [[dido:99_annexes:annex-b-terms-and-definitions:t:test_result|Test Results]]
  * [[dido:99_annexes:annex-b-terms-and-definitions:e:evidence|Evidence]]
  * [[dido:99_annexes:annex-b-terms-and-definitions:t:traceability|Traceability]]
  * [[dido:99_annexes:annex-b-terms-and-definitions:a:air-gapped_environment|Air-Gapped Environment]] [[dido:99_annexes:annex-b-terms-and-definitions:o:operating_procedure|Operating Procedures]]

===== Verification =====

Verification confirms that:

  - DIDO-TE performs testing operations in an Air-Gapped Environment
  - The Air-Gapped Environment maintains physical isolation from external networks during test execution
  - No active External Network Connection exists during test execution
  - Test execution does not depend upon an External Service
  - The resources required by the Test Definition exist within the Air-Gapped Environment before test execution begins
  - Authorized transfer processes introduce required testing artifacts and dependencies into the Air-Gapped Environment
  - Authorized transfer processes remove Test Results, logs, and Evidence from the Air-Gapped Environment
  - Transfer controls preserve the integrity, provenance, and Traceability of transferred content
  - Transfer operations do not compromise the physical isolation of the Air-Gapped Environment
  - The Evidence identifies the Air-Gapped Environment and records the isolation conditions applicable during test execution

===== Referenced By =====

The following pages reference this requirement:

{{backlinks>.#dido:03-dido-te}}

===== Delivery Phase =====

<todo>Assign the delivery phase for MO-007c.</todo>

===== Implementation Status =====

<todo>Record the implementation status of MO-007c after reviewing the implementation plan.</todo>

===== Requirement Status =====

<todo>The proposed derived requirement requires review and acceptance.</todo>

----

===== Issues =====

<todo>Confirm the testing operations included within the scope of Air-Gapped Environment operation.</todo>

<todo>Define how DIDO-TE verifies and records the physical isolation of the Air-Gapped Environment.</todo>

<todo>Identify the authorized processes for transferring resources into and Test Results, logs, and Evidence out of an Air-Gapped Environment.</todo>

<todo>Determine whether Transfer Bundle preparation, validation, introduction, and removal require separate derived requirements beneath MO-007c.</todo>

<todo>Identify the controls that prevent transfer operations from compromising the physical isolation of the Air-Gapped Environment.</todo>

<todo>Determine how DIDO-TE identifies and records dependencies upon External Services before air-gapped test execution.</todo>

<todo>Confirm that MO-007c, together with MO-007a and MO-007b, preserves the complete approved intent of MO-007.</todo>

----

===== Notes for Editors =====

Use the following code to reference the Statement section from another wiki page:

<code dokuwiki>
{{section>dido:03-dido-te:99-annexes:annex-c-requirements:01-mission-objectives:mo-007:mo-007c#Statement&noheader&nofooter&noeditbtn}}
</code>

----

<WRAP centeralign>
© 2026 Dido Solutions, Inc. and Jackrabbit Consulting, Inc.
</WRAP>