public:99_annexes:annex-b-terms-and-definitions:h:high-assurance_environment

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision		 Previous revision
public:99_annexes:annex-b-terms-and-definitions:h:high-assurance_environment [2026/09/12 17:42] – removed - external edit (Unknown date) 127.0.0.1public:99_annexes:annex-b-terms-and-definitions:h:high-assurance_environment [2026/09/12 17:43] (current) – ↷ Links adapted because of a move operation nick_dido
Line 1: Line 1:
 +====== High-Assurance Environment ======
  
 +[[public:99_annexes:annex-b-terms-and-definitions:start|Go up to Terms and Definitions]]
 +
 +===== Discussion =====
 +
 +A High-Assurance Environment requires justified confidence that its systems, services, infrastructure, processes, and controls satisfy defined security, safety, reliability, integrity, availability, or mission objectives.
 +
 +The environment establishes that confidence through controlled design, verified implementation, repeatable operation, traceable configuration, risk assessment, testing, monitoring, and supporting [[public:99_annexes:annex-b-terms-and-definitions:e:evidence|Evidence]].
 +
 +A High-Assurance Environment places greater emphasis on demonstrable trustworthiness than an ordinary operating environment. The required level of assurance depends on the consequences of failure, compromise, incorrect operation, loss of availability, or loss of evidentiary integrity.
 +
 +A High-Assurance Environment may also operate as a [[public:99_annexes:annex-b-terms-and-definitions:r:regulated_environment|Regulated Environment]], but external regulation does not define high assurance by itself.
 +
 +===== Definition =====
 +
 +//operating environment that requires justified confidence that its systems, services, infrastructure, processes, and controls satisfy defined assurance objectives//
 +
 +===== Source =====
 +
 +Generalised from systems assurance, safety engineering, security engineering, mission assurance, and high-integrity systems usage and specialized for the Crucible architecture and operational model.
 +
 +===== Note =====
 +
 +High assurance concerns the strength and basis of confidence in an environment. It does not identify a specific technology, deployment model, regulatory regime, or accreditation method.
 +
 +The required assurance objectives and evidence depend on the mission, threat model, consequences of failure, and governance context.
 +
 +===== Example =====
 +
 +A defense organization operates a disconnected software factory that uses controlled configurations, hardened images, verified dependencies, repeatable builds, compliance scanning, and traceable evidence. The organization treats the factory as a High-Assurance Environment because compromise or incorrect operation would create significant mission risk.
 +
 +----
 +
 +<WRAP centeralign>
 +© 2026 Dido Solutions, Inc. and Jackrabbit Consulting, Inc.
 +</WRAP>