A MODEL FOR ASSURANCE OF EXTERNAL PROPERTIES OF INFORMATION SECURITY REQUIREMENT BASES

Abstract

Harmonization of information security harnonization requirements is a process of transforming abstract information security objectives into concrete information security policies in an automated manner. The process is designed to also provide assurance from internal properties, such as consistency and correctness, of an requrement base, collection of information security requirements. Harnmonization is, anyhow, not capable of dealing with external properties of a requirement base, such as comprehensiveness. A model shall be proposed to provide assurance for the external properties of a requirement base in the harmonization framework.