ENV-001i — Define Security Constraints

Go to ENV-001 — Define Test Environment

Statement

The DIDO-TE SHALL define each security Constraint applicable to a Test Environment or record that no security Constraint applies and provide the basis for the determination.

Derived From

, source requirement identifier and obligation to be assigned[DTE6] Structured Information Processing Reference Architecture (SIP-RA)[DTE7] Federated Data Interpretation Systems Reference Architecture (FDIS-RA)

Rationale

Defining the applicable security Constraints establishes the conditions governing access, identity, authentication, authorization, confidentiality, integrity, isolation, and information handling within a Test Environment.

The defined Constraints support secure instantiation and operation of the Test Environment, validation of its security state, and assessment of whether a security condition influenced a Test Execution or Test Result.

An explicit determination that no security Constraint applies distinguishes an intentional condition from missing information.

Applies To

Verification

Verification confirms that:

Each Test Environment defines every applicable security Constraint.Each defined security Constraint identifies the element, relationship, information, or operation it governs.The instantiated Test Environment satisfies each applicable security Constraint.A Test Environment without an applicable security Constraint records the determination and its basis.A missing, undefined, or unsatisfied applicable security Constraint constitutes nonconformance with this requirement.Verification includes:

Inspection of the controlled information for each Test EnvironmentInspection of the defined security ConstraintsInspection or testing of the security conditions present in the instantiated Test EnvironmentComparison of the observed security conditions with the defined security ConstraintsInspection of recorded determinations that no security Constraint appliesInspection of the basis recorded for each such determinationA negative assessment using a Test Environment that violates an applicable security ConstraintConfirmation that the negative assessment produces a nonconformance result

Referenced By

Related Architecture Sections

Add links to the architecture sections governing Test Environment security and security Constraints.

Delivery Phase

Assign the applicable delivery phase.

Requirement Status

Draft

Statement Reference

Use the following syntax to reference this requirement’s Statement section from another DokuWiki page:

{{section>dido:03-dido-te:99-annexes:annex-c-requirements:02-test-environment-requirements:env-001-define-test-environment:env-001i-define-security-constraints#Statement&noheader&nofooter&noeditbtn}}

© 2026 Dido Solutions, Inc. and Jackrabbit Consulting, Inc.