Minimum Controls Matrix by Risk Level
This matrix defines the minimum floor of security controls expected, by technical domain, according to the application's risk level (L1–L3), as determined in Chapter 01.
This matrix defines the minimum floor of security controls expected, by technical domain, according to the application's risk level (L1–L3), as determined in Chapter 01.
This document has been integrated into addon 07 - Requirements Validation. See validacao-requisitos.
How to build and maintain a traceability matrix that links identified risks, canonical requirements, project operational tags, technical controls and auditable evidence.