| Requirement Pattern Stored Data Protection | Description | This pattern expresses the need of protecting system data from unauthorized access | |
| Comments | ---- | ||
| Pattern goal | Protect system data from unauthorized access | ||
| Author | GESSI-SSI | ||
| Sources (0..*) |
| ||
| Keywords (0..*) | ---- | ||
| Dependencies (0..*) | IMPLIES Backups IMPLIES Authentication IMPLIES Authorization IMPLIES Data Transmission Protection | ||
| Requirement Form Data Protection | Description | ---- | |
| Comments | Application of extensions: Data Encryption: may be applied at most once each. | ||
| Version date | 2009-03-20 00:00:00.0 | ||
| Author | GESSI-SSI | ||
| Sources (0..*) |
| ||
| Fixed Part | Question text | ---- | Form text | %data% kept in the system shall not be accessible to unauthorized user profiles or to people attempting to access from outside the system |
| Parameter | Metric | ||
| data: is a non-empty set of types of data that are managed by the system | DataDescriptors: DataDescriptors = Set(DataDescriptor) DataDescriptor = Domain(Personal Data, Financial Data, ....) | ||
| Extended Part Data Encryption | Question text | ---- | Form text | All %data% kept in the system shall be encrypted |
| Parameter | Metric | ||
| data: is a non-empty set of types of data that are managed by the system. This data must be a subset of the data in the fixed part | DataDescriptors: DataDescriptors = Set(DataDescriptor) DataDescriptor = Domain(Personal Data, Financial Data, ....) | ||