Skip to content

Improvement: Add security process checks #796

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
masc2023 merged 1 commit into from
Sep 28, 2026
Merged

Improvement: Add security process checks #796

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
17 changes: 16 additions & 1 deletion process/process_areas/architecture_design/guidance/architecture_process_reqs.rst
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -290,6 +290,22 @@ Checks for Architectural Design

It shall be checked that security relevant architectural elements (Security==YES) can only be linked against security relevant architectural elements.

.. gd_req:: Check of Architecture linkage security requirement
:id: gd_req__arch_linkage_requirement_security
:status: valid
:version: 1
:tags: prio_2_automation, attribute, check
:satisfies: wf__cr_mt_featarch[version==1], wf__cr_mt_comparch[version==1]

It shall be checked that a security relevant requirement or AoU (Security == YES) is only
satisfied by security relevant architectural elements (Security == YES), in both link directions:

* requirement -> satisfied_by -> feature / component
* architectural view, interface or component -> fulfils -> requirement / AoU

Note: The reverse is allowed. A security relevant architectural element may also fulfil
requirements which are not security relevant.

.. gd_req:: Check of Architecture linkage requirement
:id: gd_req__arch_linkage_requirement
:status: valid
Expand Down Expand Up @@ -341,7 +357,6 @@ Checks for Architectural Design

It shall be checked if all SW components which are mentioned in the dynamic architecture views are defined in the static architecture.


Process Monitoring and Improvement
----------------------------------

Expand Down
14 changes: 14 additions & 0 deletions ...s/process_areas/requirements_engineering/guidance/requirements_process_reqs.rst
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -437,6 +437,20 @@ Process Requirements Checks

Note: This ensures that safety requirements are properly derived into their children. Also a mix of safe and QM aspects in a parent is avoided by this.

.. gd_req:: Requirements linkage security
:id: gd_req__req_linkage_security
:status: valid
:version: 1
:tags: prio_2_automation, check
:satisfies: wf__req_stkh_req[version==1], wf__req_feat_req[version==1], wf__req_comp_req[version==1]

It shall be checked that every security relevant requirement (Security == YES) which has child
requirements has at least one security relevant child requirement (Security == YES).

Note: Unlike :need:`gd_req__req_linkage_safety`, a child which is not security relevant may be
derived from a security relevant parent, because a parent is commonly refined into security and
non-security aspects. What the check prevents is the security aspect being lost in the refinement.

.. gd_req:: Requirements validity
:id: gd_req__req_validity
:status: valid
Expand Down
Loading