NOD-011c — Protect Preserved Node State

Go to NOD-011 — Preserve Node State

The DIDO-TE SHALL protect each preserved representation of Node state using the protections specified by the governing Test Definition.

• NOD-011 — Preserve Node State
• NOD-011a — Specify Node State Preservation
• NOD-011b — Capture Node State
• [DTE5] DIDO-TE Requirements Register, source requirement identifier and obligation to be assigned
• [DTE6] Structured Information Processing Reference Architecture (SIP-RA)
• [DTE7] Federated Data Interpretation Systems Reference Architecture (FDIS-RA)

Protection preserves the confidentiality, integrity, availability, identity, context, and usability of a captured Node-state representation.

A preserved state representation may contain configuration information, internal data, pending work, Node Bindings, credentials, security information, resource assignments, or other sensitive information. Protection prevents unauthorized access, disclosure, alteration, substitution, removal, copying, or use.

Integrity protection demonstrates that the representation remains the same as the verified captured representation or that each authorized change remains distinguishable and traceable.

Availability protection ensures that the representation remains accessible for the purpose and period specified by the governing Test Definition.

Protection requirements continue while the DIDO-TE stores, transfers, copies, verifies, restores, or disposes of the representation. A change of storage location or custody does not end the protection obligation.

• DIDO-TE
• Node
• Node Definition
• Node Implementation
• Node Configuration
• Node Binding
• Test Definition
• Test Environment
• Test Execution
• Test Resource
• Authorizing Authority
• Evidence
• Traceability

Verification confirms that:

1. The governing Test Definition specifies the protections governing each preserved Node-state representation.
2. The DIDO-TE uniquely identifies each protected representation.
3. The DIDO-TE protects the confidentiality of the representation.
4. The DIDO-TE protects the integrity of the representation.
5. The DIDO-TE protects the availability of the representation.
6. The DIDO-TE protects the representation from unauthorized access, disclosure, alteration, substitution, copying, removal, use, or deletion.
7. The DIDO-TE restricts access to identities authorized by the governing Test Definition.
8. The DIDO-TE verifies authorization before granting access to the representation.
9. The DIDO-TE preserves the association between the representation and the Node, preservation point, Test Environment, and Test Execution.
10. The DIDO-TE protects the representation while storing, transferring, copying, verifying, restoring, and disposing of it.
11. The DIDO-TE preserves protection when custody or storage location changes.
12. The DIDO-TE detects an unauthorized access attempt.
13. The DIDO-TE detects alteration, corruption, substitution, removal, or loss of the representation.
14. Each authorized change produces a distinguishable revision and preserves the prior representation when the governing Test Definition requires preservation of the prior representation.
15. The DIDO-TE records each authorized access, transfer, change of custody, and material protection event identified for retention.
16. The DIDO-TE prevents a representation that fails an integrity check from being used for restoration, comparison, Test Results, or Evidence.
17. The DIDO-TE maintains Traceability among the representation, Node, preservation specification, protections, authorized identities, access events, custody changes, Test Executions, Test Results, and resulting Evidence.
18. Missing, incomplete, ineffective, bypassed, unauthorized, or untraceable protection constitutes nonconformance with this requirement.

The following pages reference this requirement:

Assign the delivery phase.

Assign the implementation status.

The proposed derived requirement requires review and acceptance.

Assign the source requirement identifier and obligation from the DIDO-TE Requirements Register.

{{section>dido:03-dido-te:99-annexes:annex-c-requirements:03-node-requirements:nod-011-preserve-node-state:nod-011c-protect-preserved-node-state#Statement&noheader&nofooter&noeditbtn}}