Persistency Security Plan#

Persistency Security Plan		status: valid security: YES safety: ASIL_B
tags: persistency version: 2 realizes: wp__module_security_plan

doc__persistency_security_plan		Generic Document

Security Management Context#

This Security Plan adds to the gd_guidl__security_plan_definitions all the module development relevant work products needed for ISO SAE 21434 conformity.

Security Management Scope#

This Security Plan’s scope is a SW module of the SW platform Persistency Documentation. The module consists of one or more SW components and will be qualified as an OoC (Out of Context).

Security Management Roles#

Table 11 Module roles#
Role	Assignee
Security Manager	Karthik Vanka
Module Project Manager (= Feature team lead)	Uwe Maucher

Tailoring#

Additional to the tailoring in the SW platform project as defined in the gd_guidl__security_plan_definitions we define here the additional tailoring on module level.

Excluded for this module are additionally the following work products (and their related requirements):
- none
Notes on the execution of the planned work products:
- wp__audit_report_security is tailored out on platform level (see the work product definition), therefore no module security audit is planned.
- The component security analysis refers to the feature security analysis (STRIDE (doc__persistency_stride)), because the KVS component has no internal components (KVS Component Architecture (doc__kvs_component_architecture)).
- The detailed design is captured in the source code (public API headers and traits, source code comments) according to gd_guidl__implementation. KVS Detailed Design (doc__kvs_detailed_design) documents the decomposition into units.

Security Module Work Products#

One set of work products for the module and one set for each component of the module:

Table 12 Module Work Products#
Work Product Id	Link to process	Process status	Link to issue	Link to WP	WP status
wp__module_security_plan	gd_guidl__security_plan_definitions	valid	n/a	this document	valid
wp__module_security_package	gd_guidl__security_package	valid	n/a	this document (including the linked documentation)	valid
wp__fdr_reports_security (module Security Plan)	gd_chklst__security_plan	valid	n/a	Persistency Security Plan F... (doc__persistency_security_plan_fdr)	valid
wp__fdr_reports_security (module Security Package)	gd_chklst__security_package	valid	n/a	Persistency Security Packag... (doc__persistency_sec_pkg_fdr)	valid
wp__fdr_reports_security (module’s Security Analyses)	gd_chklst__security_analysis	valid	n/a	Not yet available, the review requires the completed feature security analysis STRIDE (doc__persistency_stride)	n/a
wp__audit_report_security	performed by external experts	n/a	n/a	Tailored out on platform level, see Tailoring	n/a
wp__module_security_manual	gd_temp__module_security_manual	valid	#321	Persistency Security Manual (doc__persistency_security_manual)	valid
wp__verification_module_ver_report	gd_temp__mod_ver_report	valid	<Link to issue>	Persistency Module Verifica... (mod_vrep__persistency__report)	valid
wp__module_sw_release_note	gd_temp__rel_mod_rel_note	valid	n/a	Persistency Release Note (doc__persistency_release_note)	valid
Module user manual (`wp__module_user_manual`, defined after process_description v2.1.2; until then realized as wp__training_path)	Release management guidance	n/a	n/a	Persistency User Manual (doc__persistency_user_manual)	valid
wp__sw_module_sbom	wf__cr_mt_security_sbom	valid	n/a	Bazel target `//:sbom_product` (SPDX 2.3 and CycloneDX 1.6 SBOM of `//score/kvs:kvs` and `//score/kvs/rust_kvs:rust_kvs`), see Software Bill of Material (SBOM)	Generated on demand with `bazel build //:sbom_product`, not yet part of the release workflow

Table 13 Component KVS Work Products#
Work Product Id	Link to process	Process status	Link to issue	Link to WP	WP status
wp__requirements_comp	gd_temp__req_comp_req	valid	n/a	KVS Requirements (doc__kvs_requirements)	valid
wp__requirements_comp_aou	gd_temp__req_aou_req	valid	n/a	KVS Requirements (doc__kvs_requirements)	valid
wp__requirements_inspect	gd_chklst__req_inspection	valid	n/a	KVS Requirements Inspection... (doc__kvs_req_inspection)	invalid
wp__component_arch	gd_temp__arch_comp	valid	n/a	KVS Component Architecture (doc__kvs_component_architecture)	valid
wp__sw_component_security_analysis	gd_guidl__security_analysis	valid	n/a	Covered by the feature security analysis STRIDE (doc__persistency_stride), see Tailoring	valid
wp__sw_arch_verification	gd_chklst__arch_inspection_checklist	valid	#321	KVS Architecture Inspection... (doc__kvs_arc_inspection)	draft
wp__sw_implementation	gd_guidl__implementation	valid	#321	KVS Detailed Design (doc__kvs_detailed_design) & source code	draft
wp__verification_sw_unit_test	gd_guidl__verification_guide	valid	<Link to issue>	Bazel test suites `//score/kvs:unit_tests` and `//score/kvs/rust_kvs:unit_tests`, results in Persistency Module Verifica... (mod_vrep__persistency__report)	valid
wp__sw_implementation_inspection	gd_chklst__impl_inspection_checklist	valid	#321	KVS Implementation Inspecti... (doc__kvs_impl_inspection)	draft
wp__verification_comp_int_test	gd_guidl__verification_guide	valid	<Link to issue>	Bazel test suites `//score/kvs/tests/test_cases:cit_cpp` and `//score/kvs/tests/test_cases:cit_rust`, results in Persistency Module Verifica... (mod_vrep__persistency__report)	valid