OR-001e — Security Engineer Operations

Go to OR-001 — Operation by Identified User Categories

Crucible SHALL perform each Crucible operation allocated to the Security Engineer Role.

This requirement derives from:

• OR-001 — Operation by Identified User Categories

The Original Requirement states:

The system SHALL support operation by:

Developers
DevSecOps Engineers
Platform Engineers
System Administrators
Security Engineers
Compliance Officers[C1]

OR-001e preserves the intent that Security Engineers participate in Crucible operation by requiring Crucible to perform each operation allocated to the Security Engineer Role.

The separate requirements derived from OR-001 address:

• OR-001a — Developer Operations
• OR-001b — DevSecOps Engineer Operations
• OR-001c — Platform Engineer Operations
• OR-001d — System Administrator Operations
• OR-001f — Compliance Officer Operations

Security Engineers require access to the Crucible operations allocated to the Security Engineer Role.

This requirement ensures that Crucible performs each operation allocated to the Security Engineer Role.

Separating Security Engineer operations from operations allocated to other user categories supports independent verification, Traceability, and determination of whether Crucible satisfies the operational needs assigned to Security Engineers.

Without this requirement, Crucible could perform operations allocated to other user categories while failing to perform the operations allocated to the Security Engineer Role.

This requirement applies to:

• Crucible
• Security Engineers
• Security Engineer Role
• Crucible operations allocated to the Security Engineer Role
• Controlled Inputs
• Operation status
• Operation results
• Operation failures
• Operation exceptions
• Artifacts
• Evidence
• Provenance
• Traceability
• Connected Environments
• Disconnected Environments
• Air-Gapped Environments

Verification confirms that:

1. The Security Engineer Role is identified
2. Each Crucible operation allocated to the Security Engineer Role is identified
3. Crucible performs each operation allocated to the Security Engineer Role
4. The performed operation corresponds to the allocated operation
5. Crucible produces each status, result, failure indication, exception indication, Artifact, Evidence item, or other output specified for the operation
6. The verification record preserves Traceability between the Security Engineer Role, the allocated operation, and the performed operation

The following pages reference this requirement:

Implemented and Verified.

Assess whether the current Crucible implementation performs each Crucible operation allocated to the Security Engineer Role.

Review and accept OR-001e as a proposed derived requirement created from the evaluation and decomposition of OR-001 in the Crucible System Requirements Specification, Version 1.1 Draft.

The following unresolved issues affect this requirement:

Define Security Engineer Role or reference an authoritative definition. Identify the essential characteristics of the role and distinguish the role from the Developer Role, DevSecOps Engineer Role, Platform Engineer Role, System Administrator Role, and Compliance Officer Role.

Identify the controlling source that allocates Crucible operations to the Security Engineer Role.

This requirement page should retain the stable requirement identifier OR-001e.

This page is a leaf requirement page and omits a trailing :start from its namespace.

The parent OR-001 page is a non-leaf page and retains a trailing :start in its namespace.

Changes to the Statement should preserve:

• Crucible as the responsible actor
• Security Engineer Role as the recipient of the operation allocation
• Allocation of each Crucible operation to the Security Engineer Role
• Performance of each allocated operation by Crucible

The unresolved meaning of Security Engineer Role should remain recorded in the Issues section until an authoritative definition resolves the issue.

The source of each operation allocation should remain recorded in the Issues section until a controlling source establishes the allocation.

Material changes should receive review and should update the verification criteria, source records, and Issues section.

To reference this requirement Statement from another wiki page, insert:

{{section>dido:02-crusible:99-annexes:annex-c-requirements:02-operational-requirements:or-001:or-001e#Statement&noheader&nofooter&noeditbtn}}

Do not rename this page after an external citation unless a redirect or move plan is in place.