| Both sides previous revision Previous revision Next revision | Previous revision |
| dido:02-crusible:99-annexes:annex-c-requirements:03-functional-requirements:03-06-compliance-management:fr-comp-009:start [2026/07/30 13:12] – ↷ Page moved and renamed from dido:02-crusible:99-annexes:annex-c-requirements:03-functional-requirements:03-06-compliance-management:fr-comp-009 to dido:02-crusible:99-annexes:annex-c-requirements:03-functional-requirements:03-06-compliance-management:fr nick_dido | dido:02-crusible:99-annexes:annex-c-requirements:03-functional-requirements:03-06-compliance-management:fr-comp-009:start [2026/07/30 13:20] (current) – nick_dido |
|---|
| |
| The decomposition does not assign security-control approval, risk-management, risk-acceptance, authorization, or operational approval responsibilities to [[dido:99_annexes:annex-b-terms-and-definitions:c:crucible|Crucible]]. | The decomposition does not assign security-control approval, risk-management, risk-acceptance, authorization, or operational approval responsibilities to [[dido:99_annexes:annex-b-terms-and-definitions:c:crucible|Crucible]]. |
| |
| ===== Proposed Statements ===== | |
| |
| The Original Requirement is decomposed into: | |
| |
| - [[dido:02-crusible:99-annexes:annex-c-requirements:03-functional-requirements:03-06-compliance-management:fr-comp-009:fr-comp-009a|FR-COMP-009a — Security Control Traceability Matrix Evidence]] | |
| - [[dido:02-crusible:99-annexes:annex-c-requirements:03-functional-requirements:03-06-compliance-management:fr-comp-009:fr-comp-009b|FR-COMP-009b — Risk Management Framework Evidence]] | |
| - [[dido:02-crusible:99-annexes:annex-c-requirements:03-functional-requirements:03-06-compliance-management:fr-comp-009:fr-comp-009c|FR-COMP-009c — Authorization to Operate Evidence]] | |
| |
| ==== FR-COMP-009a — Security Control Traceability Matrix Evidence ==== | |
| |
| [[dido:99_annexes:annex-b-terms-and-definitions:c:crucible|Crucible]] SHALL generate Security-Control Implementation [[dido:99_annexes:annex-b-terms-and-definitions:e:evidence|Evidence]] for inclusion in a [[dido:99_annexes:annex-b-terms-and-definitions:s:sctm|Security Control Traceability Matrix (SCTM)]]. | |
| |
| ==== FR-COMP-009b — Risk Management Framework Evidence ==== | |
| |
| [[dido:99_annexes:annex-b-terms-and-definitions:c:crucible|Crucible]] SHALL generate Security-Control Implementation [[dido:99_annexes:annex-b-terms-and-definitions:e:evidence|Evidence]] for use in [[dido:99_annexes:annex-b-terms-and-definitions:r:rmf|Risk Management Framework (RMF)]] activities. | |
| |
| ==== FR-COMP-009c — Authorization to Operate Evidence ==== | |
| |
| [[dido:99_annexes:annex-b-terms-and-definitions:c:crucible|Crucible]] SHALL generate Security-Control Implementation [[dido:99_annexes:annex-b-terms-and-definitions:e:evidence|Evidence]] for use in [[dido:99_annexes:annex-b-terms-and-definitions:a:ato|Authorization to Operate (ATO)]] activities. | |
| |
| ===== Contents ===== | ===== Contents ===== |