Commit ccc0c339 authored by Valerie Aurora's avatar Valerie Aurora
Browse files

Update and move copy-n-paste technical requirement

parent a7fbdd33
Loading
Loading
Loading
Loading
+17 −18
Original line number Diff line number Diff line
@@ -205,24 +205,6 @@ The VPN provider shall alert the user if traffic can be forwarded through the en
| any          | TRAF-2, TRAF-3 if applicable |
| DAT >= 2     | TRAF-1                       |

### 5.2.X **TR-XXXX**:

#### 5.2.X.x **MI-XXXX**:

_Description of mitigation in "shall" format_

* Test:
* Result:
* Output:

Optional:

* False positive test:
* Requirements:
* Documentation:

> Copy-n-paste mitigation format

### 5.2.X **TR-DMIN**: Data minimization

The product shall not collect data unnecessary for the functions of the product.
@@ -270,6 +252,23 @@ The VPN provider shall not require PII for use of the product, including for pay
| UC-1, UC-2, UC-4     | NPII-1, NPII-2         |
| UC-3                 | NPII-1, NPII-2, NPII-3 |


> Copy-n-paste mitigation format

### 5.2.X **TR-XXXX**:

#### 5.2.X.x **MI-XXXX**:

_Description of mitigation in "shall" format_

* Applicability: (optional, for requirements that depend on a feature)
* Reference: TR-
* Objective:
* Preparation:
* Activities:
* Verdict:
* Evidence:

## Notes - will go away in final version

### Don't write generic technical requirements