====== ENV-001i — Define Security Constraints ======

[[dido:03-dido-te:99-annexes:annex-c-requirements:03-functional-requirements:03-01-test-environment-requirements:env-001-define-test-environment:start|Go to ENV-001 — Define Test Environment]]

===== Statement =====

The [[dido:99_annexes:annex-b-terms-and-definitions:d:dido-te|DIDO-TE]] SHALL define each security [[dido:99_annexes:annex-b-terms-and-definitions:c:constraint|Constraint]] applicable to a [[dido:99_annexes:annex-b-terms-and-definitions:t:test_environment|Test Environment]] or record that no security Constraint applies and provide the basis for the determination.

===== Derived From =====

  * [[dido:03-dido-te:99-annexes:annex-b-references:dte-005|[DTE5] DIDO-TE Requirements Register]], source requirement identifier and obligation to be assigned
  * [[dido:03-dido-te:99-annexes:annex-b-references:dte-006|[DTE6] Structured Information Processing Reference Architecture (SIP-RA)]]
  * [[dido:03-dido-te:99-annexes:annex-b-references:dte-007|[DTE7] Federated Data Interpretation Systems Reference Architecture (FDIS-RA)]]

===== Rationale =====

Defining the applicable security [[dido:99_annexes:annex-b-terms-and-definitions:c:constraint|Constraints]] establishes the conditions governing access, identity, authentication, authorization, confidentiality, integrity, isolation, and information handling within a [[dido:99_annexes:annex-b-terms-and-definitions:t:test_environment|Test Environment]].

The defined Constraints support secure instantiation and operation of the Test Environment, validation of its security state, and assessment of whether a security condition influenced a [[dido:99_annexes:annex-b-terms-and-definitions:t:test_execution|Test Execution]] or [[dido:99_annexes:annex-b-terms-and-definitions:t:test_result|Test Result]].

An explicit determination that no security Constraint applies distinguishes an intentional condition from missing information.

===== Applies To =====

  * [[dido:99_annexes:annex-b-terms-and-definitions:t:test_environment|Test Environment]]
  * [[dido:99_annexes:annex-b-terms-and-definitions:c:constraint|Constraint]]
  * [[dido:99_annexes:annex-b-terms-and-definitions:n:node|Node]]
  * [[dido:99_annexes:annex-b-terms-and-definitions:t:test_object|Test Object]]
  * [[dido:99_annexes:annex-b-terms-and-definitions:t:test_resource|Test Resource]]

===== Verification =====

Verification confirms that:

  * Each Test Environment defines every applicable security Constraint.
  * Each defined security Constraint identifies the element, relationship, information, or operation it governs.
  * The instantiated Test Environment satisfies each applicable security Constraint.
  * A Test Environment without an applicable security Constraint records the determination and its basis.
  * A missing, undefined, or unsatisfied applicable security Constraint constitutes nonconformance with this requirement.

Verification includes:

  * Inspection of the controlled information for each Test Environment
  * Inspection of the defined security Constraints
  * Inspection or testing of the security conditions present in the instantiated Test Environment
  * Comparison of the observed security conditions with the defined security Constraints
  * Inspection of recorded determinations that no security Constraint applies
  * Inspection of the basis recorded for each such determination
  * A negative assessment using a Test Environment that violates an applicable security Constraint
  * Confirmation that the negative assessment produces a nonconformance result

===== Referenced By =====

{{backlinks>.}}

===== Related Architecture Sections =====

  * Add links to the architecture sections governing Test Environment security and security Constraints.

===== Delivery Phase =====

Assign the applicable delivery phase.

===== Requirement Status =====

Draft

===== Statement Reference =====

Use the following syntax to reference this requirement’s Statement section from another DokuWiki page:

<code dokuwiki>
{{section>dido:03-dido-te:99-annexes:annex-c-requirements:02-test-environment-requirements:env-001-define-test-environment:env-001i-define-security-constraints#Statement&noheader&nofooter&noeditbtn}}
</code>

----

<WRAP centeralign>
© 2026 Dido Solutions, Inc. and Jackrabbit Consulting, Inc.
</WRAP>