Module Security Plan

Persistency Security Plan		status: valid security: YES safety: ASIL_B
tags: persistency version: 1 realizes: wp__module_security_plan
doc__persistency_security_plan		Generic Document

Security Management Context

This Security Plan adds to the gd_guidl__security_plan_definitions all the module development relevant workproducts needed for ISO SAE 21434 conformity.

Security Management Scope

This Security Plan’s scope is a SW module of the SW platform Persistency Documentation. The module consists of one or more SW components and will be qualified as a EooC.

Security Management Roles

Table 11 Module roles

Role	Assignee
Security Manager	Karthik Vanka
Module Project Manager (= Feature team lead)	Uwe Maucher

Tailoring

Additional to the tailoring in the SW platform project as defined in the gd_guidl__security_plan_definitions we define here the additional tailoring on module level.

- Excluded for this module are additionally the following workproducts (and their related requirements):

- No workproducts excluded

Security Module Workproducts

Table 12 Module Workproducts

Workproduct Id	Link to process	Process status	Link to issue	Link to WP	WP status
wp__module_security_plan	gd_guidl__security_plan_definitions	valid	<Link to issue>	this document	valid
wp__module_security_package	gd_guidl__security_package	valid	<Link to issue>	this document (including the linked documentation)	valid
wp__fdr_reports_security (module Security Plan)	gd_chklst__security_plan	valid	<Link to issue>	Persistency Security Plan F... (doc__persistency_security_plan_fdr)	valid
wp__fdr_reports_security (module Security Package)	gd_chklst__security_package	valid	<Link to issue>	Persistency Security Packag... (doc__persistency_sec_pkg_fdr)	valid
wp__fdr_reports_security (module’s Security Analyses)	gd_guidl__security_analysis	valid	<Link to issue>	Not yet available	n/a
wp__audit_report_security	performed by external experts	n/a	<Link to issue>	<Link to WP>	<WP status (manual)>
wp__module_security_manual	gd_temp__module_security_manual	valid	<Link to issue>	Persistency Security Manual (doc__persistency_security_manual)	draft
wp__verification_module_ver_report	gd_temp__mod_ver_report	valid	<Link to issue>	Persistency Module Verifica... (mod_vrep__persistency__report)	valid
wp__module_sw_release_note	gd_temp__rel_mod_rel_note	valid	<Link to issue>	Persistency Release Note (doc__persistency_release_note)	valid
wp__sw_module_sbom	wf__cr_mt_security_sbom	valid	<Link to issue>	Bazel target //:sbom_product (product SBOM of //score/kvs:kvs and //score/kvs/rust_kvs:rust_kvs)	Generated with bazel build //:sbom_product, not yet part of the release workflow

Table 13 Component KVS Work products

Workproduct Id	Link to process	Process status	Link to issue	Link to WP	WP status
wp__requirements_comp	gd_temp__req_comp_req	valid	<Link to issue>	KVS Requirements (doc__kvs_requirements)	valid
wp__requirements_comp_aou	gd_temp__req_aou_req	valid	<Link to issue>	KVS Requirements (doc__kvs_requirements)	valid
wp__requirements_inspect	gd_chklst__req_inspection	valid	<Link to issue>	KVS Requirements Inspection... (doc__kvs_req_inspection)	invalid
wp__component_arch	gd_temp__arch_comp	valid	<Link to issue>	KVS Component Architecture (doc__kvs_component_architecture)	valid
wp__sw_component_security_analysis	gd_guidl__security_analysis	valid	<Link to issue>	Not yet available	n/a
wp__sw_arch_verification	gd_chklst__arch_inspection_checklist	valid	<Link to issue>	KVS Architecture Inspection... (doc__kvs_arc_inspection)	draft
wp__sw_implementation	gd_guidl__implementation	valid	<Link to issue>	KVS Detailed Design (doc__kvs_detailed_design) & source code	draft
wp__verification_sw_unit_test	gd_guidl__verification_guide	valid	<Link to issue>	Bazel test suites //score/kvs:unit_tests and //score/kvs/rust_kvs:unit_tests, results in Persistency Module Verifica... (mod_vrep__persistency__report)	valid
wp__sw_implementation_inspection	gd_chklst__impl_inspection_checklist	valid	<Link to issue>	KVS Implementation Inspecti... (doc__kvs_impl_inspection)	draft
wp__verification_comp_int_test	gd_guidl__verification_guide	valid	<Link to issue>	Bazel test suites //score/kvs/tests/test_cases:cit_cpp and //score/kvs/tests/test_cases:cit_rust, results in Persistency Module Verifica... (mod_vrep__persistency__report)	valid