6 docs tagged with "ADR"

Decision, validation and minimum evidence criteria for secure architecture, including the architectural baseline model and invalidation conditions

Traceability model between ARC requirements, threats, architectural decisions and auditable evidence, with a matrix template and update criteria

Specifics of exception management in the context of the secure architecture requirements (ARC-001..013)

Terms used in Chapter 04 with operational definitions and associated artefacts

Organisational policy that defines the requirements for applying secure architecture principles throughout the lifecycle of applications classified L2 and L3, including baseline definition, management of architecture decisions (ADR), review of trust boundaries, integration with threat modelling and formal approval requirements.

Canonical catalogue of structural and design security requirements (ARC-001 to ARC-013), organised by risk level, with acceptance criteria for architecture reviews, ADRs and technical audits.