Loading clauses/5.Requirements.md +17 −18 Original line number Diff line number Diff line Loading @@ -205,24 +205,6 @@ The VPN provider shall alert the user if traffic can be forwarded through the en | any | TRAF-2, TRAF-3 if applicable | | DAT >= 2 | TRAF-1 | ### 5.2.X **TR-XXXX**: #### 5.2.X.x **MI-XXXX**: _Description of mitigation in "shall" format_ * Test: * Result: * Output: Optional: * False positive test: * Requirements: * Documentation: > Copy-n-paste mitigation format ### 5.2.X **TR-DMIN**: Data minimization The product shall not collect data unnecessary for the functions of the product. Loading Loading @@ -270,6 +252,23 @@ The VPN provider shall not require PII for use of the product, including for pay | UC-1, UC-2, UC-4 | NPII-1, NPII-2 | | UC-3 | NPII-1, NPII-2, NPII-3 | > Copy-n-paste mitigation format ### 5.2.X **TR-XXXX**: #### 5.2.X.x **MI-XXXX**: _Description of mitigation in "shall" format_ * Applicability: (optional, for requirements that depend on a feature) * Reference: TR- * Objective: * Preparation: * Activities: * Verdict: * Evidence: ## Notes - will go away in final version ### Don't write generic technical requirements Loading Loading
clauses/5.Requirements.md +17 −18 Original line number Diff line number Diff line Loading @@ -205,24 +205,6 @@ The VPN provider shall alert the user if traffic can be forwarded through the en | any | TRAF-2, TRAF-3 if applicable | | DAT >= 2 | TRAF-1 | ### 5.2.X **TR-XXXX**: #### 5.2.X.x **MI-XXXX**: _Description of mitigation in "shall" format_ * Test: * Result: * Output: Optional: * False positive test: * Requirements: * Documentation: > Copy-n-paste mitigation format ### 5.2.X **TR-DMIN**: Data minimization The product shall not collect data unnecessary for the functions of the product. Loading Loading @@ -270,6 +252,23 @@ The VPN provider shall not require PII for use of the product, including for pay | UC-1, UC-2, UC-4 | NPII-1, NPII-2 | | UC-3 | NPII-1, NPII-2, NPII-3 | > Copy-n-paste mitigation format ### 5.2.X **TR-XXXX**: #### 5.2.X.x **MI-XXXX**: _Description of mitigation in "shall" format_ * Applicability: (optional, for requirements that depend on a feature) * Reference: TR- * Objective: * Preparation: * Activities: * Verdict: * Evidence: ## Notes - will go away in final version ### Don't write generic technical requirements Loading