MO-007c — Air-Gapped Environment Operation

Go to MO-007 — Connected, Disconnected, and Air-Gapped Operation

DIDO-TE SHALL perform testing operations in an Air-Gapped Environment that maintains physical isolation from external networks.

MO-007c derives from MO-007 — Connected, Disconnected, and Air-Gapped Operation.

MO-007c specifies the Air-Gapped Environment portion of MO-007.

An Air-Gapped Environment maintains physical isolation from external networks during testing operations.

Air-Gapped Environment operation requires DIDO-TE to conduct tests without an active External Network Connection or access to an External Service. The resources required for test execution must therefore exist within the Air-Gapped Environment before test execution begins.

Authorized transfer processes introduce required testing artifacts, dependencies, configurations, test data, policies, and other resources into the Air-Gapped Environment. Authorized transfer processes also remove Test Results, logs, and Evidence after test execution.

Applicable transfer controls preserve the integrity, provenance, and Traceability of transferred content without compromising the physical isolation of the environment.

An Air-Gapped Environment differs from a Disconnected Environment. A Disconnected Environment lacks active external network connectivity during the applicable operation. An Air-Gapped Environment maintains physical isolation from external networks.

MO-007c applies to:

• DIDO-TE
• Air-Gapped Environments
• Test Definitions
• Candidate Solutions
• Test execution
• External Network Connections
• External Services
• Transfer Bundles
• Test Results
• Evidence
• Traceability
• Air-Gapped Environment Operating Procedures

Verification confirms that:

1. DIDO-TE performs testing operations in an Air-Gapped Environment
2. The Air-Gapped Environment maintains physical isolation from external networks during test execution
3. No active External Network Connection exists during test execution
4. Test execution does not depend upon an External Service
5. The resources required by the Test Definition exist within the Air-Gapped Environment before test execution begins
6. Authorized transfer processes introduce required testing artifacts and dependencies into the Air-Gapped Environment
7. Authorized transfer processes remove Test Results, logs, and Evidence from the Air-Gapped Environment
8. Transfer controls preserve the integrity, provenance, and Traceability of transferred content
9. Transfer operations do not compromise the physical isolation of the Air-Gapped Environment
10. The Evidence identifies the Air-Gapped Environment and records the isolation conditions applicable during test execution

The following pages reference this requirement:

Assign the delivery phase for MO-007c.

Record the implementation status of MO-007c after reviewing the implementation plan.

The proposed derived requirement requires review and acceptance.

Confirm the testing operations included within the scope of Air-Gapped Environment operation.

Define how DIDO-TE verifies and records the physical isolation of the Air-Gapped Environment.

Identify the authorized processes for transferring resources into and Test Results, logs, and Evidence out of an Air-Gapped Environment.

Determine whether Transfer Bundle preparation, validation, introduction, and removal require separate derived requirements beneath MO-007c.

Identify the controls that prevent transfer operations from compromising the physical isolation of the Air-Gapped Environment.

Determine how DIDO-TE identifies and records dependencies upon External Services before air-gapped test execution.

Confirm that MO-007c, together with MO-007a and MO-007b, preserves the complete approved intent of MO-007.

Use the following code to reference the Statement section from another wiki page:

{{section>dido:03-dido-te:99-annexes:annex-c-requirements:01-mission-objectives:mo-007:mo-007c#Statement&noheader&nofooter&noeditbtn}}