SFS 8 / SF C

Back to SFS 8

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Has documented evidence been maintained throughout the development lifecycle confirming that threat analysis was updated to address significant changes in system architecture or functionality during the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Documented threat analysis updates linked to significant architectural/functional changes

Assessment criterion and evidence

Actor: Organization. Scope: All new software systems developed during the review period. Evidence period: Throughout the development lifecycle during the review period. Required evidence: Versioned threat analysis documentation showing revision history. Negative criterion: No evidence of threat analysis updates despite documented system changes. Missing evidence: Pending until verifiable evidence is provided

View the JSON record (opens in a new tab).

Assessment result: unset.