Security Plan#
Note
Document header
Lifecycle Security Plan
|
status: draft
security: YES
safety: ASIL_B
|
||||||||
1. Security Management Context
This Security Plan adds to the process security management guidance all the module development relevant work products needed for ISO SAE 21434 conformity.
|
| 2. Security Management Scope
| This Security Plan’s scope is a SW module of the SW platform <link to module documentation in platform/modules/<modulename>/index.rst>.
| The module consists of one or more SW components and will be qualified as a OoC.
|
| 3. Security Management Roles
4. Tailoring
Additional to the tailoring in the SW platform project as defined in the process security management guidance we define here the additional tailoring on module level.
|
| - Excluded for this module are additionally the following work products (and their related requirements):
| - <ISO SAE 21434 reference>: <work product/requirement> - <Argumentation why it is not needed or replaced by another work product or activity.>
|
| 5. Security Module Work Products
| One set of work products for the module and one set for each component of the module:
|
|||||||||
Work Product Id |
Link to process |
Process status |
Link to issue |
Link to WP |
WP status |
|---|---|---|---|---|---|
Security management guideline |
<automated> |
<Link to issue> |
this document |
see above |
|
Security management guideline |
<automated> |
<Link to issue> |
<Link to WP> |
<automated> |
|
Formal Document Review Reports (wp__fdr_reports) (Module Security Plan) |
<automated> |
<Link to issue> |
<Link to WP> |
<automated> |
|
Formal Document Review Reports (wp__fdr_reports) (Module Security Package) |
Security Package Formal Review Checklist (gd_chklst__security_package) |
<automated> |
<Link to issue> |
<Link to WP> |
<automated> |
Formal Document Review Reports (wp__fdr_reports) (Module’s Security Analyses) |
Security Analysis FDR tbd |
<automated> |
<Link to issue> |
<Link to WP> |
<automated> |
performed by external experts |
n/a |
<Link to issue> |
<Link to WP> |
<WP status (manual)> |
|
Module Security Manual Temp... (gd_temp__module_security_manual) |
<automated> |
<Link to issue> |
<Link to WP> |
<automated> |
|
Module Verification Report (wp__verification_module_ver_report) |
Verification process guidance |
<automated> |
<Link to issue> |
<Link to WP> |
<automated> |
Release management guidance |
<automated> |
<Link to issue> |
<Link to WP> |
<automated> |
|
Security management guidance |
not started |
<Link to issue> |
<Link to WP> |
<automated> |
Work Product Id |
Link to process |
Process status |
Link to issue |
Link to WP |
WP status |
|---|---|---|---|---|---|
<Link to process> |
<automated> |
<Link to issue> |
<Link to WP> |
<automated> |
|
<Link to process> |
<automated> |
<Link to issue> |
<Link to WP> |
<automated> |
|
<Link to process> |
<automated> |
n/a |
Checklist used in Pull Request Review |
n/a |
|
<Link to process> |
<automated> |
<Link to issue> |
<Link to WP> |
<automated> |
|
Component Security Analysis (wp__sw_component_security_analysis) |
<Link to process> |
<automated> |
<Link to issue> |
<Link to WP> |
<automated> |
<Link to process> |
<automated> |
<Link to issue> |
<Link to WP> |
<automated> |
|
<Link to process> |
<automated> |
<Link to issue> |
<Link to WP> |
<automated> |
|
<Link to process> |
<automated> |
<Link to issue> |
<Link to WP> |
<automated> |
|
Implementation Inspection (wp__sw_implementation_inspection) |
<Link to process> |
<automated> |
<Link to issue> |
<Link to WP> |
<automated> |
<Link to process> |
<automated> |
<Link to issue> |
<Link to WP> |
<automated> |