Security Plan#

Note

Document header

[Your Module Name] Security Plan
status: draft
security: YES
safety: ASIL_B
tags: template
realizes: wp__module_security_plan
doc__mod_temp_module_name_security_plan
Generic Document

Attention

The above directive must be updated according to your Module.

  • Modify Your Module Name to be your Module Name

  • Modify id to be your Module Name in upper snake case preceded by doc_ and succeeded by security_plan

  • Adjust status to be valid

  • Adjust safety and tags according to your needs

1. Security Management Context
This Security Plan adds to the process security management guidance all the module development relevant work products needed for ISO SAE 21434 conformity. | | 2. Security Management Scope | This Security Plan’s scope is a SW module of the SW platform <link to module documentation in platform/modules/<modulename>/index.rst>. | The module consists of one or more SW components and will be qualified as a OoC. | | 3. Security Management Roles

Security Manager

<link to Module’s Security Manager assignment or name>

Project Manager

<link to Module’s Project Lead assignment or name>
4. Tailoring
Additional to the tailoring in the SW platform project as defined in the process security management guidance we define here the additional tailoring on module level. | | - Excluded for this module are additionally the following work products (and their related requirements): | - <ISO SAE 21434 reference>: <work product/requirement> - <Argumentation why it is not needed or replaced by another work product or activity.> | | 5. Security Module Work Products | One set of work products for the module and one set for each component of the module:
Table 16 Module Work Products#

Work Product Id

Link to process

Process status

Link to issue

Link to WP

WP status

wp__module_security_plan

Security management guideline

<automated>

<Link to issue>

this document

see above

wp__module_security_package

Security management guideline

<automated>

<Link to issue>

<Link to WP>

<automated>

wp__fdr_reports (Module Security Plan)

gd_chklst__security_plan

<automated>

<Link to issue>

<Link to WP>

<automated>

wp__fdr_reports (Module Security Package)

gd_chklst__security_package

<automated>

<Link to issue>

<Link to WP>

<automated>

wp__fdr_reports (Module’s Security Analyses)

Security Analysis FDR tbd

<automated>

<Link to issue>

<Link to WP>

<automated>

wp__audit_report_security

performed by external experts

n/a

<Link to issue>

<Link to WP>

<WP status (manual)>

wp__module_sw_release_note

gd_temp__software_development_plan

<automated>

<Link to issue>

<Link to WP>

<automated>

wp__module_security_manual

gd_temp__module_security_manual

<automated>

<Link to issue>

<Link to WP>

<automated>

wp__verification_module_ver_report

Verification process guidance

<automated>

<Link to issue>

<Link to WP>

<automated>

wp__module_sw_release_note

Release management guidance

<automated>

<Link to issue>

<Link to WP>

<automated>

wp__sw_module_sbom

Security management guidance

not started

<Link to issue>

<Link to WP>

<automated>
Table 17 Component <name> Work Products#

Work Product Id

Link to process

Process status

Link to issue

Link to WP

WP status

wp__requirements_comp

<Link to process>

<automated>

<Link to issue>

<Link to WP>

<automated>

wp__requirements_comp_aou

<Link to process>

<automated>

<Link to issue>

<Link to WP>

<automated>

wp__requirements_inspect

<Link to process>

<automated>

n/a

Checklist used in Pull Request Review

n/a

wp__component_arch

<Link to process>

<automated>

<Link to issue>

<Link to WP>

<automated>

wp__sw_component_security_analysis

<Link to process>

<automated>

<Link to issue>

<Link to WP>

<automated>

wp__sw_arch_verification

<Link to process>

<automated>

<Link to issue>

<Link to WP>

<automated>

wp__sw_implementation

<Link to process>

<automated>

<Link to issue>

<Link to WP>

<automated>

wp__verification_sw_unit_test

<Link to process>

<automated>

<Link to issue>

<Link to WP>

<automated>

wp__sw_implementation_inspection

<Link to process>

<automated>

<Link to issue>

<Link to WP>

<automated>

wp__verification_comp_int_test

<Link to process>

<automated>

<Link to issue>

<Link to WP>

<automated>