Security Plan#

Note

Document header

Lifecycle Security Plan
status: draft
security: YES
safety: ASIL_B
version: 0
realizes: wp__module_security_plan
1. Security Management Context
This Security Plan adds to the process security management guidance all the module development relevant work products needed for ISO SAE 21434 conformity. | | 2. Security Management Scope | This Security Plan’s scope is a SW module of the SW platform <link to module documentation in platform/modules/<modulename>/index.rst>. | The module consists of one or more SW components and will be qualified as a OoC. | | 3. Security Management Roles

Security Manager

<link to Module’s Security Manager assignment or name>

Project Manager

<link to Module’s Project Lead assignment or name>
4. Tailoring
Additional to the tailoring in the SW platform project as defined in the process security management guidance we define here the additional tailoring on module level. | | - Excluded for this module are additionally the following work products (and their related requirements): | - <ISO SAE 21434 reference>: <work product/requirement> - <Argumentation why it is not needed or replaced by another work product or activity.> | | 5. Security Module Work Products | One set of work products for the module and one set for each component of the module:
doc__lifecycle_security_plan
Generic Document
Table 17 Module Work Products#

Work Product Id

Link to process

Process status

Link to issue

Link to WP

WP status

wp__module_security_plan

Security management guideline

<automated>

<Link to issue>

this document

see above

wp__module_security_package

Security management guideline

<automated>

<Link to issue>

<Link to WP>

<automated>

wp__fdr_reports (Module Security Plan)

gd_chklst__security_plan

<automated>

<Link to issue>

<Link to WP>

<automated>

wp__fdr_reports (Module Security Package)

gd_chklst__security_package

<automated>

<Link to issue>

<Link to WP>

<automated>

wp__fdr_reports (Module’s Security Analyses)

Security Analysis FDR tbd

<automated>

<Link to issue>

<Link to WP>

<automated>

wp__audit_report_security

performed by external experts

n/a

<Link to issue>

<Link to WP>

<WP status (manual)>

wp__module_security_manual

gd_temp__module_security_manual

<automated>

<Link to issue>

<Link to WP>

<automated>

wp__verification_module_ver_report

Verification process guidance

<automated>

<Link to issue>

<Link to WP>

<automated>

wp__module_sw_release_note

Release management guidance

<automated>

<Link to issue>

<Link to WP>

<automated>

wp__sw_module_sbom

Security management guidance

not started

<Link to issue>

<Link to WP>

<automated>
Table 18 Component <name> Work Products#

Work Product Id

Link to process

Process status

Link to issue

Link to WP

WP status

wp__requirements_comp

<Link to process>

<automated>

<Link to issue>

<Link to WP>

<automated>

wp__requirements_comp_aou

<Link to process>

<automated>

<Link to issue>

<Link to WP>

<automated>

wp__requirements_inspect

<Link to process>

<automated>

n/a

Checklist used in Pull Request Review

n/a

wp__component_arch

<Link to process>

<automated>

<Link to issue>

<Link to WP>

<automated>

wp__sw_component_security_analysis

<Link to process>

<automated>

<Link to issue>

<Link to WP>

<automated>

wp__sw_arch_verification

<Link to process>

<automated>

<Link to issue>

<Link to WP>

<automated>

wp__sw_implementation

<Link to process>

<automated>

<Link to issue>

<Link to WP>

<automated>

wp__verification_sw_unit_test

<Link to process>

<automated>

<Link to issue>

<Link to WP>

<automated>

wp__sw_implementation_inspection

<Link to process>

<automated>

<Link to issue>

<Link to WP>

<automated>

wp__verification_comp_int_test

<Link to process>

<automated>

<Link to issue>

<Link to WP>

<automated>