.. # ******************************************************************************* # Copyright (c) 2025 Contributors to the Eclipse Foundation # # See the NOTICE file(s) distributed with this work for additional # information regarding copyright ownership. # # This program and the accompanying materials are made available under the # terms of the Apache License Version 2.0 which is available at # https://www.apache.org/licenses/LICENSE-2.0 # # SPDX-License-Identifier: Apache-2.0 # ******************************************************************************* Security Plan ============= .. note:: Document header .. document:: [Your Module Name] Security Plan :id: doc__mod_temp_module_name_security_plan :status: draft :safety: ASIL_B :security: YES :realizes: wp__module_security_plan :tags: template .. attention:: The above directive must be updated according to your Module. - Modify ``Your Module Name`` to be your Module Name - Modify ``id`` to be your Module Name in upper snake case preceded by ``doc_`` and succeeded by ``security_plan`` - Adjust ``status`` to be ``valid`` - Adjust ``safety`` and ``tags`` according to your needs | **1. Security Management Context** | This Security Plan adds to the process security management guidance all the module development relevant work products needed for ISO SAE 21434 conformity. | | **2. Security Management Scope** | This Security Plan's scope is a SW module of the SW platform /index.rst>. | The module consists of one or more SW components and will be qualified as a OoC. | | **3. Security Management Roles** +---------------------------+--------------------------------------------------------------+ | Security Manager | | +---------------------------+--------------------------------------------------------------+ | Project Manager | | +---------------------------+--------------------------------------------------------------+ | **4. Tailoring** | Additional to the tailoring in the SW platform project as defined in the process security management guidance we define here the additional tailoring on module level. | | - Excluded for this module are additionally the following work products (and their related requirements): | - : - | | **5. Security Module Work Products** | One set of work products for the module and one set for each component of the module: .. list-table:: Module Work Products :header-rows: 1 * - Work Product Id - Link to process - Process status - Link to issue - Link to WP - WP status * - :need:`wp__module_security_plan` - Security management guideline - - - this document - see above * - :need:`wp__module_security_package` - Security management guideline - - - - * - :need:`wp__fdr_reports` (Module Security Plan) - :need:`gd_chklst__security_plan` - - - - * - :need:`wp__fdr_reports` (Module Security Package) - :need:`Security Package Formal Review Checklist ` - - - - * - :need:`wp__fdr_reports` (Module's Security Analyses) - Security Analysis FDR tbd - - - - * - :need:`wp__audit_report_security` - performed by external experts - n/a - - - * - :need:`wp__module_sw_release_note` - :need:`Software Development Plan Template ` - - - - * - :need:`wp__module_security_manual` - :need:`gd_temp__module_security_manual` - - - - * - :need:`wp__verification_module_ver_report` - Verification process guidance - - - - * - :need:`wp__module_sw_release_note` - Release management guidance - - - - * - :need:`wp__sw_module_sbom` - Security management guidance - not started - - - .. list-table:: Component Work Products :header-rows: 1 * - Work Product Id - Link to process - Process status - Link to issue - Link to WP - WP status * - :need:`wp__requirements_comp` - - - - - * - :need:`wp__requirements_comp_aou` - - - - - * - :need:`wp__requirements_inspect` - - - n/a - Checklist used in Pull Request Review - n/a * - :need:`wp__component_arch` - - - - - * - :need:`wp__sw_component_security_analysis` - - - - - * - :need:`wp__sw_arch_verification` - - - - - * - :need:`wp__sw_implementation` - - - - - * - :need:`wp__verification_sw_unit_test` - - - - - * - :need:`wp__sw_implementation_inspection` - - - - - * - :need:`wp__verification_comp_int_test` - - - - -