OR-001e — Security Engineer Operations

Go to OR-001 — Operation by Identified User Categories

Statement

Crucible SHALL perform each Crucible operation allocated to the Security Engineer Role.

Derived From

This requirement derives from:

The Original Requirement states:

The system SHALL support operation by: Developers DevSecOps Engineers Platform Engineers System Administrators Security Engineers Compliance Officers[C1]

OR-001e preserves the intent that Security Engineers participate in Crucible operation by requiring Crucible to perform each operation allocated to the Security Engineer Role.

The separate requirements derived from OR-001 address:

Rationale

Security Engineers require access to the Crucible operations allocated to the Security Engineer Role.

This requirement ensures that Crucible performs each operation allocated to the Security Engineer Role.

Separating Security Engineer operations from operations allocated to other user categories supports independent verification, Traceability, and determination of whether Crucible satisfies the operational needs assigned to Security Engineers.

Without this requirement, Crucible could perform operations allocated to other user categories while failing to perform the operations allocated to the Security Engineer Role.

Applies To

This requirement applies to:

Security EngineersSecurity Engineer RoleCrucible operations allocated to the Security Engineer RoleControlled InputsOperation statusOperation resultsOperation failuresOperation exceptionsArtifactsEvidenceProvenanceTraceabilityConnected EnvironmentsDisconnected EnvironmentsAir-Gapped Environments

Verification

Verification confirms that:

The Security Engineer Role is identifiedEach Crucible operation allocated to the Security Engineer Role is identifiedCrucible performs each operation allocated to the Security Engineer RoleThe performed operation corresponds to the allocated operationCrucible produces each status, result, failure indication, exception indication, Artifact, Evidence item, or other output specified for the operationThe verification record preserves Traceability between the Security Engineer Role, the allocated operation, and the performed operation

Referenced By

The following pages reference this requirement:

Delivery Phase

Implemented and Verified.

Implementation Status

Requirement Status

Issues

The following unresolved issues affect this requirement:

Notes for Editors

This requirement page should retain the stable requirement identifier OR-001e.

This page is a leaf requirement page and omits a trailing :start from its namespace.

The parent OR-001 page is a non-leaf page and retains a trailing :start in its namespace.

Changes to the Statement should preserve:

as the responsible actorSecurity Engineer Role as the recipient of the operation allocationAllocation of each Crucible operation to the Security Engineer RolePerformance of each allocated operation by CrucibleThe unresolved meaning of Security Engineer Role should remain recorded in the Issues section until an authoritative definition resolves the issue.

The source of each operation allocation should remain recorded in the Issues section until a controlling source establishes the allocation.

Material changes should receive review and should update the verification criteria, source records, and Issues section.

To reference this requirement Statement from another wiki page, insert:

{{section>dido:02-crusible:99-annexes:annex-c-requirements:02-operational-requirements:or-001:or-001e#Statement&noheader&nofooter&noeditbtn}}

Do not rename this page after an external citation unless a redirect or move plan is in place.

© 2026 Dido Solutions, Inc. and Jackrabbit Consulting, Inc.