MO-008b — Evidence Traceability

Go to MO-008 — Traceable Test Results and Evidence

DIDO-TE SHALL use persistent identifiers and recorded relationships to maintain Traceability from each Evidence item to its source, applicable Test Execution, supported subject, method and time of collection or creation, responsible actor or producing system, and integrity and provenance information.

MO-008b derives from MO-008 — Traceable Test Results and Evidence.

MO-008b specifies the Evidence Traceability portion of MO-008.

Evidence has limited value when a reviewer cannot determine where it originated, how and when DIDO-TE collected or created it, what it supports, or whether it has retained its integrity.

Evidence Traceability connects each Evidence item to its source and the Test Execution associated with its collection or creation. It also identifies the subject the Evidence supports. The supported subject may include a Test Result, Observation, Test Environment, configuration, control, execution condition, or exception.

The recorded relationships allow reviewers, auditors, and authorization authorities to determine the origin, context, relevance, and integrity of an Evidence item. They also distinguish Evidence collected or created during different Test Executions, under different conditions, or by different actors or systems.

MO-008b addresses Traceability for Evidence. MO-008a — Test Result Traceability separately addresses Traceability for Test Results.

MO-008b applies to:

• DIDO-TE
• Evidence
• Traceability
• Test Executions
• Test Results
• Observations
• Test Environments
• Candidate Solutions
• Evidence sources
• Evidence collection and creation methods
• Responsible actors and producing systems
• Evidence integrity and provenance information

Verification confirms that:

1. Each Evidence item has a persistent unique identifier
2. Each Evidence item identifies its source
3. Each Evidence item identifies the applicable Test Execution
4. Each Evidence item identifies or references the subject it supports
5. Each Evidence item records its method of collection or creation
6. Each Evidence item records its time of collection or creation
7. Each Evidence item identifies the responsible actor or producing system
8. Each Evidence item includes or references its integrity information
9. Each Evidence item includes or references its provenance information
10. The recorded relationships remain available throughout the applicable Evidence lifecycle
11. An authorized reviewer can follow the recorded relationships from the Evidence item to each applicable object or record

The following pages reference this requirement:

Assign the delivery phase for MO-008b.

Record the implementation status of MO-008b after reviewing the implementation plan.

The proposed derived requirement requires review and acceptance.

Confirm the minimum relationships required to establish Evidence Traceability.

Determine the Evidence subjects that DIDO-TE recognizes, including Test Results, Observations, Test Environments, configurations, controls, execution conditions, and exceptions.

Define the persistent identifier scheme used for Evidence and related records.

Determine the lifecycle period during which DIDO-TE maintains Evidence Traceability.

Confirm the integrity and provenance information required for each type of Evidence.

Determine whether Evidence retention and chain-of-custody obligations require separate requirements.

Confirm that MO-008a and MO-008b collectively preserve the complete intent of MO-008.

Use the following code to reference the Statement section from another wiki page:

{{section>dido:03-dido-te:99-annexes:annex-c-requirements:01-mission-objectives:mo-008:mo-008b#Statement&noheader&nofooter&noeditbtn}}