5.1.11 Security

Return to Requirements

Proposals SHALL demonstrate that the specification proposed in response to this RFP can be made secure in environments that require security.

Submissions SHALL provide answers to the following questions:

• What security-sensitive elements, if any, does the proposal introduce
• Which accesses to security-sensitive elements should be subject to security policy control
• Does the proposed service or facility need to be security-aware
• What default policies, such as authentication, audit, authorization, and message protection, should be applied to the security-sensitive elements introduced by the proposal
• What security considerations should implementers of the proposal understand

OMG has adopted several specifications that address various security aspects and provide useful resources for formulating responses [SEC] [RAD].