3 docs tagged with "matriz"

Minimum mandatory requirements by application criticality classification

Proportional application of the monitoring and response controls according to the application's risk classification.

The single index of all security verification in SbD-ToE — activity × type × oracle × chapter × risk level — distinguishing testing (behavioural oracle) from analysis/scanning (lookup/policy oracle).