4 docs tagged with "ARC"

Traceability model between ARC requirements, threats, architectural decisions and auditable evidence, with a matrix template and update criteria

Validation criteria per requirement (ARC-001 to ARC-013), with methods, moments and owners, organised by risk level

Technical and process indicators for assessing the effectiveness of secure architecture controls, with thresholds per risk level and a mapping to the SbD-ToE cross-cutting governance dimensions.

Canonical catalogue of structural and design security requirements (ARC-001 to ARC-013), organised by risk level, with acceptance criteria for architecture reviews, ADRs and technical audits.