ENV-002h — Enforce Security Constraints

Go to ENV-002 — Configure Test Environment

Statement

The DIDO-TE SHALL enforce each security Constraint applicable to a Test Environment before and during Test Execution.

Derived From

, source requirement identifier and obligation to be assigned[DTE6] Structured Information Processing Reference Architecture (SIP-RA)[DTE7] Federated Data Interpretation Systems Reference Architecture (FDIS-RA)

Rationale

Security Constraints establish the protections governing access to and interaction with a Test Environment and its constituent elements.

Enforcing these Constraints protects the confidentiality, integrity, authenticity, availability, and permitted use of Test Objects, Nodes, Test Resources, communications, data, configurations, and Evidence.

Maintaining the specified security conditions prevents unauthorised access, prohibited communication, uncontrolled modification, and other security violations from affecting Test Execution or the resulting Test Results.

Applies To

Verification

Verification confirms that:

The DIDO-TE identifies every security Constraint applicable to the Test Environment.The DIDO-TE enforces each applicable security Constraint before and during Test Execution.The enforced Constraints govern identity, authentication, authorisation, access, isolation, communication, data protection, integrity, and audit recording, when applicable.The DIDO-TE excludes access, operations, and communications prohibited by the applicable security Constraints.The DIDO-TE records security-relevant events and violations as Evidence.The DIDO-TE maintains Traceability among each security Constraint, its enforcement mechanism, and the applicable Test Execution.The DIDO-TE prevents Test Execution when a required security Constraint remains unsatisfied before execution.The DIDO-TE identifies a security Constraint violation occurring during Test Execution and records its relationship to the affected Test Execution and Test Results.A missing, unenforced, violated, or untraceable security Constraint constitutes nonconformance with this requirement.Verification includes:

Inspection of the security Constraints applicable to the Test EnvironmentInspection of the mechanisms enforcing each security ConstraintInspection of identity, authentication, authorisation, access-control, isolation, communication-protection, integrity, and audit records, when applicableTesting of permitted access, operations, and communicationsTesting for the exclusion of prohibited access, operations, and communicationsInspection of security Evidence and Traceability recordsA negative assessment using an unsatisfied security Constraint before Test ExecutionConfirmation that the DIDO-TE prevents Test Execution when the Constraint remains unsatisfiedA negative assessment introducing a security Constraint violation during Test ExecutionConfirmation that the DIDO-TE identifies and records the violation and its relationship to the affected Test Execution and Test Results

Referenced By

Related Architecture Sections

Add links to the architecture sections governing security Constraints, access control, communications protection, audit recording, and security-event handling.

Delivery Phase

Assign the applicable delivery phase.

Requirement Status

Draft

Statement Reference

Use the following syntax to reference this requirement’s Statement section from another DokuWiki page:

{{section>dido:03-dido-te:99-annexes:annex-c-requirements:02-test-environment-requirements:env-002-configure-test-environment:env-002h-enforce-security-constraints#Statement&noheader&nofooter&noeditbtn}}

© 2026 Dido Solutions, Inc. and Jackrabbit Consulting, Inc.