6 docs tagged with "transversal"

Six cross-cutting dimensions for measuring the health of the SbD-ToE programme, aggregating domain indicators from all chapters for executive and risk management visibility.

The single index of all security verification in SbD-ToE — activity × type × oracle × chapter × risk level — distinguishing testing (behavioural oracle) from analysis/scanning (lookup/policy oracle).

Cross-cutting map of the secure development process for systems with AI agents — from mandate to kill-switch, with stops in each SbD-ToE chapter and a cross-reference to the AI Act, NIS2, DORA and the CRA

Cross-cutting organisational policy that defines the formal process for the submission, assessment, approval, recording and reassessment of exceptions to mandatory security controls, with approval authorities proportional to the application's risk level. It applies to all SbD-ToE chapters in which there are controls with formal mandatory status.

Process view of the SbD-ToE — five macro-processes that preserve the continuities between the capabilities prescribed in chapters 01–14, defined in measurable form.

Cross-cutting organisational policy that defines the traceability requirements between requirements, controls, validation evidence, build artefacts and operational events, ensuring that the security posture is auditable continuously and in proportion to the application's risk level.