| Both sides previous revision Previous revision | |
| public:99_annexes:annex-b-terms-and-definitions:s:security [2026/09/12 17:42] – ↷ Page moved from private:99_annexes:annex-b-terms-and-definitions:s:security to public:99_annexes:annex-b-terms-and-definitions:s:security nick_dido | public:99_annexes:annex-b-terms-and-definitions:s:security [2026/09/12 17:43] (current) – ↷ Links adapted because of a move operation nick_dido |
|---|
| ====== Security ====== | ====== Security ====== |
| |
| [[private:99_annexes:annex-b-terms-and-definitions:start|Go up to Terms and Definitions]] | [[public:99_annexes:annex-b-terms-and-definitions:start|Go up to Terms and Definitions]] |
| |
| ===== Discussion ===== | ===== Discussion ===== |
| |
| Security is a [[private:99_annexes:annex-b-terms-and-definitions:q:quality_characteristic|Quality Characteristic]] concerning the degree to which a subject protects information, operations, and resources so Actors and systems receive access appropriate to their authorization. | Security is a [[public:99_annexes:annex-b-terms-and-definitions:q:quality_characteristic|Quality Characteristic]] concerning the degree to which a subject protects information, operations, and resources so Actors and systems receive access appropriate to their authorization. |
| |
| Security can apply to: | Security can apply to: |
| |
| * A [[private:99_annexes:annex-b-terms-and-definitions:c:candidate_solution|Candidate Solution]] | * A [[public:99_annexes:annex-b-terms-and-definitions:c:candidate_solution|Candidate Solution]] |
| * A [[private:99_annexes:annex-b-terms-and-definitions:d:distributed_system|Distributed System]] | * A [[public:99_annexes:annex-b-terms-and-definitions:d:distributed_system|Distributed System]] |
| * A [[private:99_annexes:annex-b-terms-and-definitions:n:node|Node]] | * A [[public:99_annexes:annex-b-terms-and-definitions:n:node|Node]] |
| * A [[private:99_annexes:annex-b-terms-and-definitions:n:node_set|Node Set]] | * A [[public:99_annexes:annex-b-terms-and-definitions:n:node_set|Node Set]] |
| * A service | * A service |
| * A software component | * A software component |
| * A hardware component | * A hardware component |
| * An [[private:99_annexes:annex-b-terms-and-definitions:e:endpoint|Endpoint]] | * An [[public:99_annexes:annex-b-terms-and-definitions:e:endpoint|Endpoint]] |
| * An [[private:99_annexes:annex-b-terms-and-definitions:e:execution_facility|Execution Facility]] | * An [[public:99_annexes:annex-b-terms-and-definitions:e:execution_facility|Execution Facility]] |
| * An [[private:99_annexes:annex-b-terms-and-definitions:o:operational_resource|Operational Resource]] | * An [[public:99_annexes:annex-b-terms-and-definitions:o:operational_resource|Operational Resource]] |
| * A [[private:99_annexes:annex-b-terms-and-definitions:t:test_environment|Test Environment]] | * A [[public:99_annexes:annex-b-terms-and-definitions:t:test_environment|Test Environment]] |
| * Information | * Information |
| * Another subject requiring protection | * Another subject requiring protection |
| * Protection of stored information | * Protection of stored information |
| * Protection of credentials | * Protection of credentials |
| * Protection of [[private:99_annexes:annex-b-terms-and-definitions:e:evidence|Evidence]] | * Protection of [[public:99_annexes:annex-b-terms-and-definitions:e:evidence|Evidence]] |
| * Detection of security events | * Detection of security events |
| * Response to security events | * Response to security events |
| * The protected operations | * The protected operations |
| * The protected resources | * The protected resources |
| * The applicable [[private:99_annexes:annex-b-terms-and-definitions:a:actor|Actors]] | * The applicable [[public:99_annexes:annex-b-terms-and-definitions:a:actor|Actors]] |
| * The applicable [[private:99_annexes:annex-b-terms-and-definitions:r:role|Roles]] | * The applicable [[public:99_annexes:annex-b-terms-and-definitions:r:role|Roles]] |
| * The applicable [[private:99_annexes:annex-b-terms-and-definitions:a:authority|Authorities]] | * The applicable [[public:99_annexes:annex-b-terms-and-definitions:a:authority|Authorities]] |
| * The applicable authorization rules | * The applicable authorization rules |
| * The applicable threats | * The applicable threats |
| * The applicable security controls | * The applicable security controls |
| * The applicable security events | * The applicable security events |
| * The applicable [[private:99_annexes:annex-b-terms-and-definitions:g:governance_policy|Governance Policies]] | * The applicable [[public:99_annexes:annex-b-terms-and-definitions:g:governance_policy|Governance Policies]] |
| * The applicable [[private:99_annexes:annex-b-terms-and-definitions:v:validation_criteria|Validation Criteria]] | * The applicable [[public:99_annexes:annex-b-terms-and-definitions:v:validation_criteria|Validation Criteria]] |
| * The applicable [[private:99_annexes:annex-b-terms-and-definitions:a:acceptance_criteria|Acceptance Criteria]] | * The applicable [[public:99_annexes:annex-b-terms-and-definitions:a:acceptance_criteria|Acceptance Criteria]] |
| * Its Evidence | * Its Evidence |
| * Its [[private:99_annexes:annex-b-terms-and-definitions:p:provenance|Provenance]] | * Its [[public:99_annexes:annex-b-terms-and-definitions:p:provenance|Provenance]] |
| * Its [[private:99_annexes:annex-b-terms-and-definitions:t:traceability|Traceability]] | * Its [[public:99_annexes:annex-b-terms-and-definitions:t:traceability|Traceability]] |
| |
| Security can be evaluated by determining whether the subject: | Security can be evaluated by determining whether the subject: |
| ===== Definition ===== | ===== Definition ===== |
| |
| //[[private:99_annexes:annex-b-terms-and-definitions:q:quality_characteristic|Quality Characteristic]] concerning the degree to which a subject protects information, operations, and resources so Actors and systems receive access appropriate to their authorization// | //[[public:99_annexes:annex-b-terms-and-definitions:q:quality_characteristic|Quality Characteristic]] concerning the degree to which a subject protects information, operations, and resources so Actors and systems receive access appropriate to their authorization// |
| |
| ===== Source ===== | ===== Source ===== |
| |
| * [[https://www.iso.org/standard/78176.html|ISO/IEC 25010:2023, Systems and software Quality Requirements and Evaluation (SQuaRE) — Product quality model]] | * [[https://www.iso.org/standard/78176.html|ISO/IEC 25010:2023, Systems and software Quality Requirements and Evaluation (SQuaRE) — Product quality model]] |
| * [[private:99_annexes:annex-b-terms-and-definitions:q:quality_characteristic|Quality Characteristic]] | * [[public:99_annexes:annex-b-terms-and-definitions:q:quality_characteristic|Quality Characteristic]] |
| * [[private:99_annexes:annex-b-terms-and-definitions:g:governance_policy|Governance Policy]] | * [[public:99_annexes:annex-b-terms-and-definitions:g:governance_policy|Governance Policy]] |
| * DIDO Reference Implementation Conceptual Model | * DIDO Reference Implementation Conceptual Model |
| * DIDO-TE draft Requirements Register | * DIDO-TE draft Requirements Register |