Mapping 1
From IXIT to E.Info
For each TS 103 701 IXIT: the documentation it requires, the E.Info items of EN 18031 it already answers, the EN 303 645 provisions behind it and the EN 18031 security mechanisms it supports.
| TS 103 701 IXIT | IXIT documentation | E.Info | EN 303 645 provision | EN 18031 security mechanism |
|---|---|---|---|---|
| IXIT 1-AuthMech | ID, Description, Authentication Factor, Password Generation Mechanism, Security Guarantees, Cryptographic Details, Brute Force Prevention | E.Info.AUM, E.Info.AUM.PwdProperty, E.Info.AUM.UniqueBestPractice, E.Info.AUM.EnforceSettingFirstUse, E.Info.AUM.DefinedAuthEntity, E.Info.AUM.EquipmentGenerated, E.Info.CCK, E.Info.CCK.Controlled, E.Info.CCK.Shared, E.Info.CCK.Unique, E.Info.AuthenticationMechanism, E.Info.AuthenticationMechanism.AuthFactor, E.Info.Generation, E.Info.Generation.CCK, E.Info.Generation.RNSource, E.Info.Generation.RNG, E.Info.Generation.Implementation, E.Info.Generation.Deviation, E.Info.Assets, E.Info.Assets.Cryptography, E.Info.Assets.Deviation, E.Info.AUM.ConfSecGoal, E.Info.AUM.AuthChange, E.Info.AUM.BFProtection, E.Info.SecurityAsset, E.Info.SecurityAsset.Access, E.Info.SecurityAsset.PublicAccess, E.Info.SecurityAsset.Environment, E.Info.SecurityAsset.Legal, E.Info.SecurityAsset.ACM, E.Info.NetworkAsset, E.Info.NetworkAsset.Access, E.Info.NetworkAsset.PublicAccess, E.Info.NetworkAsset.Environment, E.Info.NetworkAsset.Legal, E.Info.NetworkAsset.ACM, E.Info.PrivacyAsset, E.Info.PrivacyAsset.Access, E.Info.PrivacyAsset.PublicAccess, E.Info.PrivacyAsset.Environment, E.Info.PrivacyAsset.Legal, E.Info.PrivacyAsset.ACM, E.Info.FinancialAsset, E.Info.FinancialAsset.Access, E.Info.FinancialAsset.PublicAccess, E.Info.FinancialAsset.Environment, E.Info.FinancialAsset.Legal, E.Info.FinancialAsset.ACM, E.Info.ACM, E.Info.ACM.NetworkInterface, E.Info.ACM.UserInterfaces, E.Info.ACM.MachineInterfaces, E.Info.ACM.ManagedAccessNetworkAsset, E.Info.ACM.ManagedAccessPrivacyAsset, E.Info.ACM.ManagedAccessFinancialAsset, E.Info.ACM.ManagedAccessSecurityAsset, E.Info.ACM.IntendedFunctionality, E.Info.ACM.IntendedEnvironment, E.Info.ACM.AuthorizedEntity, E.Info.ACM.AuthenticationMechanism, E.Info.ACM.ReadOnlyFunctionality, E.Info.ACM.ReadOnlyLegal | 5.1-1, 5.1-2, 5.1-2A, 5.1-3, 5.1-4, 5.1-5, 5.5-4, 5.5-5 | ACM-1, ACM-2, ACM-5, ACM-6, AUM-1-1, AUM-1-2, AUM-1-3, AUM-2, AUM-4, AUM-5-1, AUM-5-2, AUM-6, CCK-2, CCK-3, CRY-1 |
| IXIT 2-UserInfo | Documentation of Change Mechanisms, Publication of Vulnerability Disclosure Policy, Support Period, Publication of Support Period, Documentation of Replacement, Publication of Non-Updatable, Model Designation, Documentation of Sensors, Documentation of Deletion, Documentation of Secure Setup, Documentation of Setup Check, Documentation of Maintenance Check, Documentation of Telemetry Data | E.Info.AUM, E.Info.AUM.ConfSecGoal, E.Info.AUM.AuthChange, E.Info.SecurityAsset, E.Info.PrivacyAsset, E.Info.FinancialAsset, E.Info.SoftwareDocumentation, E.Info.HardwareDocumentation, E.Info.ListOfVulnerabilities, E.Info.ListOfVulnerabilities.Remediated, E.Info.ListOfVulnerabilities.SpecificCondition, E.Info.ListOfVulnerabilities.Mitgated, E.Info.ListOfVulnerabilities.Accepted, E.Info.NetworkAsset, E.Info.UserDoc.NonNetworkInterface, E.Info.NonNetworkInterface | 5.1-4, 5.2-1, 5.2-2, 5.3-13, 5.3-14, 5.3-16, 5.8-3, 5.11-3, 5.11-4, 5.12-2, 5.12-3, 6-5 | AUM-2, AUM-4, AUM-5-1, AUM-5-2, CCK-3, GEC-1, GEC-7, SUM-1, SUM-2 |
| IXIT 3-VulnTypes | D, Description, Action, Time Frame | E.Info.SecurityAsset, E.Info.PrivacyAsset, E.Info.FinancialAsset, E.Info.SoftwareDocumentation, E.Info.HardwareDocumentation, E.Info.ListOfVulnerabilities, E.Info.ListOfVulnerabilities.Remediated, E.Info.ListOfVulnerabilities.SpecificCondition, E.Info.ListOfVulnerabilities.Mitgated, E.Info.ListOfVulnerabilities.Accepted | 5.2-2 | GEC-1 |
| IXIT 4-Conf | Confirmation of Vulnerability Actions, Confirmation of Vulnerability Monitoring, Confirmation of Update Procedures, Confirmation of Secure Management, Confirmation of Secure Development | E.Info.SecurityAsset, E.Info.PrivacyAsset, E.Info.FinancialAsset, E.Info.SoftwareDocumentation, E.Info.HardwareDocumentation, E.Info.ListOfVulnerabilities, E.Info.ListOfVulnerabilities.Remediated, E.Info.ListOfVulnerabilities.SpecificCondition, E.Info.ListOfVulnerabilities.Mitgated, E.Info.ListOfVulnerabilities.Accepted | 5.2-2, 5.2-3, 5.3-8, 5.5-8, 5.6-9 | GEC-1 |
| IXIT 5-VulnMon | ID, Description | E.Info.SecurityAsset, E.Info.PrivacyAsset, E.Info.FinancialAsset, E.Info.SoftwareDocumentation, E.Info.HardwareDocumentation, E.Info.ListOfVulnerabilities, E.Info.ListOfVulnerabilities.Remediated, E.Info.ListOfVulnerabilities.SpecificCondition, E.Info.ListOfVulnerabilities.Mitgated, E.Info.ListOfVulnerabilities.Accepted | 5.2-3 | GEC-1 |
| IXIT 6-SoftComp | ID, Description, Update Mechanism, Cryptographic Usage | E.Info.PartOfSoftw, E.Info.PartOfSoftw.FuncSaftyImp, E.Info.PartOfSoftw.Immutable, E.Info.PartOfSoftw.AltMeasures, E.Info.PartOfSoftw.SUM, E.Info.SUM, E.Info.SUM.Sign, E.Info.SUM.SecChan, E.Info.SUM.AccContMech, E.Info.SUM.Generic, E.Info.SUM.Automation, E.Info.Assets, E.Info.Assets.Cryptography, E.Info.Assets.Deviation | 5.3-1, 5.3-3, 5.5-3 | CRY-1, SUM-1, SUM-2, SUM-3 |
| IXIT 7-UpdMech | ID, Description, Security Guarantees, Cryptographic Details, Initiation and Interaction, Configuration, Update Checking, User Notification | E.Info.PartOfSoftw, E.Info.PartOfSoftw.FuncSaftyImp, E.Info.PartOfSoftw.Immutable, E.Info.PartOfSoftw.AltMeasures, E.Info.PartOfSoftw.SUM, E.Info.SUM, E.Info.SUM.Sign, E.Info.SUM.SecChan, E.Info.SUM.AccContMech, E.Info.SUM.Generic, E.Info.SUM.Automation, E.Info.Assets, E.Info.Assets.Cryptography, E.Info.Assets.Deviation | 5.3-1, 5.3-2, 5.3-3, 5.3-4A, 5.3-4B, 5.3-5, 5.3-6A, 5.3-6B, 5.3-7, 5.3-9, 5.3-10, 5.3-11, 5.3-12 | CRY-1, SUM-1, SUM-2, SUM-3 |
| IXIT 8-UpdProc | ID, Description, Time Frame | - | 5.3-8 | - |
| IXIT 9-ReplSup | Isolation, Hardware Replacement | E.Info.PartOfSoftw, E.Info.PartOfSoftw.FuncSaftyImp, E.Info.PartOfSoftw.Immutable, E.Info.PartOfSoftw.AltMeasures, E.Info.PartOfSoftw.SUM | 5.3-15A, 5.3-15B | SUM-1, SUM-2 |
| IXIT 10-SecParam | ID, Description, Type, Security Guarantees, Protection Scheme, Provisioning Mechanism, Generation Mechanism, Secure Communication Mechanisms | E.Info.SecurityAsset, E.Info.SecurityAsset.Environment, E.Info.SecurityAsset.SSM, E.Info.NetworkAsset, E.Info.NetworkAsset.Environment, E.Info.NetworkAsset.SSM, E.Info.PrivacyAsset, E.Info.PrivacyAsset.Environment, E.Info.PrivacyAsset.SSM, E.Info.FinancialAsset, E.Info.FinancialAsset.Environment, E.Info.FinancialAsset.SSM, E.Info.SSM, E.Info.SSM.Asset, E.Info.SSM.Encryption, E.Info.SSM.DigitalSignature, E.Info.SSM.AccessControl, E.Info.SSM.OTProgrammable, E.Info.SSM.HardwareProtection, E.Info.SSM.Generic, E.Info.SSM.ComplianceEvidence, E.Info.CCK, E.Info.CCK.Controlled, E.Info.CCK.Shared, E.Info.CCK.Unique, E.Info.SecurityAsset.Class, E.Info.SecurityAsset.Com, E.Info.SecurityAsset.NetworkInterface, E.Info.SecurityAsset.TrustedEnv, E.Info.SecurityAsset.AddMeasures, E.Info.NetworkAsset.Class, E.Info.NetworkAsset.Com, E.Info.NetworkAsset.NetInterface, E.Info.NetworkAsset.AddMeasures, E.Info.PrivacyAsset.class, E.Info.PrivacyAsset.Com, E.Info.PrivacyAsset.NetInterface, E.Info.PrivacyAsset.TrustedEnv, E.Info.PrivacyAsset.AddMeasures, E.Info.FinancialAsset.class, E.Info.FinancialAsset.Com, E.Info.FinancialAsset.NetworkInterface, E.Info.SCM, E.Info.SCM.Protocol, E.Info.SCM.States, E.Info.SCM.SecObjectives, E.Info.SCM.Manage, E.Info.SCM.Capabilities, E.Info.SCM.MessageEnc, E.Info.SCM.ChannelEnc, E.Info.SCM.Generic, E.Info.SCM.ImplDetail, E.Info.SCM.CCK, E.Info.SCM.ThreatProtection, E.Info.NetworkInterface, E.Info.NetworkInterface.Protocol, E.Info.NetworkInterface.Radio, E.Info.NetworkInterface.Wired, E.Info.NetworkInterface.Optical, E.Info.NetworkInterface.Acoustic | 5.4-1, 5.4-2, 5.4-3, 5.4-4, 5.5-6, 5.5-7 | CCK-3, SCM-1, SCM-3, SSM-1, SSM-2, SSM-3 |
| IXIT 11-SecComMech | ID, Description, Security Guarantees, Cryptographic Details | E.Info.SecurityAsset, E.Info.SecurityAsset.Com, E.Info.NetworkAsset, E.Info.NetworkAsset.Com, E.Info.PrivacyAsset, E.Info.PrivacyAsset.Com, E.Info.FinancialAsset, E.Info.FinancialAsset.Com, E.Info.SCM, E.Info.SCM.Capabilities, E.Info.SCM.SeqNumber, E.Info.SCM.TimeStamp, E.Info.SCM.OneTimeEncKey, E.Info.SCM.Generic, E.Info.SCM.ImplDetail, E.Info.SCM.Repudiation, E.Info.NetworkInterface, E.Info.NetworkInterface.Protocol, E.Info.Assets, E.Info.Assets.Cryptography, E.Info.Assets.Deviation, E.Info.SecurityAsset.Environment, E.Info.SecurityAsset.Class, E.Info.SecurityAsset.NetworkInterface, E.Info.SecurityAsset.TrustedEnv, E.Info.SecurityAsset.AddMeasures, E.Info.NetworkAsset.Environment, E.Info.NetworkAsset.Class, E.Info.NetworkAsset.NetInterface, E.Info.NetworkAsset.AddMeasures, E.Info.PrivacyAsset.class, E.Info.PrivacyAsset.NetInterface, E.Info.PrivacyAsset.TrustedEnv, E.Info.PrivacyAsset.AddMeasures, E.Info.FinancialAsset.class, E.Info.FinancialAsset.NetworkInterface, E.Info.SCM.Protocol, E.Info.SCM.States, E.Info.SCM.SecObjectives, E.Info.SCM.Manage, E.Info.SCM.MessageEnc, E.Info.SCM.ChannelEnc, E.Info.SCM.CCK, E.Info.SCM.ThreatProtection, E.Info.NetworkInterface.Radio, E.Info.NetworkInterface.Wired, E.Info.NetworkInterface.Optical, E.Info.NetworkInterface.Acoustic | 5.5-1, 5.5-6, 5.5-7, 5.8-1, 5.8-2 | CRY-1, SCM-1, SCM-3, SCM-4 |
| IXIT 12-NetSecImpl | ID, Description, Review/Evaluation Method, Report | E.Info.Assets, E.Info.Assets.Cryptography, E.Info.Assets.Deviation | 5.5-2 | CRY-1 |
| IXIT 13-SoftServ | ID, Description, Authentication Mechanism, Allows Configuration, Status, Justification | E.Info.SecurityAsset, E.Info.SecurityAsset.Access, E.Info.SecurityAsset.PublicAccess, E.Info.SecurityAsset.Environment, E.Info.SecurityAsset.Legal, E.Info.SecurityAsset.ACM, E.Info.NetworkAsset, E.Info.NetworkAsset.Access, E.Info.NetworkAsset.PublicAccess, E.Info.NetworkAsset.Environment, E.Info.NetworkAsset.Legal, E.Info.NetworkAsset.ACM, E.Info.PrivacyAsset, E.Info.PrivacyAsset.Access, E.Info.PrivacyAsset.PublicAccess, E.Info.PrivacyAsset.Environment, E.Info.PrivacyAsset.Legal, E.Info.PrivacyAsset.ACM, E.Info.FinancialAsset, E.Info.FinancialAsset.Access, E.Info.FinancialAsset.PublicAccess, E.Info.FinancialAsset.Environment, E.Info.FinancialAsset.Legal, E.Info.FinancialAsset.ACM, E.Info.ACM, E.Info.ACM.NetworkInterface, E.Info.ACM.UserInterfaces, E.Info.ACM.MachineInterfaces, E.Info.ACM.ManagedAccessNetworkAsset, E.Info.ACM.ManagedAccessPrivacyAsset, E.Info.ACM.ManagedAccessFinancialAsset, E.Info.ACM.ManagedAccessSecurityAsset, E.Info.ACM.IntendedFunctionality, E.Info.ACM.IntendedEnvironment, E.Info.ACM.AuthorizedEntity, E.Info.ACM.AuthenticationMechanism, E.Info.ACM.ReadOnlyFunctionality, E.Info.ACM.ReadOnlyLegal, E.Info.NetworkInterface.Exposure, E.Info.Setup | 5.5-4, 5.5-5, 5.6-5 | ACM-1, ACM-2, ACM-5, ACM-6, AUM-1-1, AUM-1-2, AUM-1-3, GEC-2 |
| IXIT 14-SecMgmt | ID, Description | - | 5.5-8 | - |
| IXIT 15-PhyIntf | ID, Description, Type, Status, Protection, Debug Interface | E.Info.SecurityAsset, E.Info.NetworkAsset, E.Info.PrivacyAsset, E.Info.FinancialAsset, E.Info.NetworkInterface.Exposure, E.Info.Setup, E.Info.PhysicalExternalInterface, E.Info.PhysicalExternalInterface.Purpose, E.Info.PhysicalExternalInterface.Type, E.Info.IntFunc, E.Info.SecurityAsset.Environment, E.Info.SecurityAsset.SSM, E.Info.NetworkAsset.Environment, E.Info.NetworkAsset.SSM, E.Info.PrivacyAsset.Environment, E.Info.PrivacyAsset.SSM, E.Info.FinancialAsset.Environment, E.Info.FinancialAsset.SSM | 5.6-1, 5.6-3, 5.6-4A, 5.6-4B | GEC-2, GEC-5, SSM-1 |
| IXIT 16-CodeMin | ID, Description | - | 5.6-6 | - |
| IXIT 17-PrivlCtrl | ID, Description | E.Info.SecurityAsset, E.Info.SecurityAsset.ACM, E.Info.NetworkAsset, E.Info.NetworkAsset.ACM, E.Info.PrivacyAsset, E.Info.PrivacyAsset.ACM, E.Info.FinancialAsset, E.Info.FinancialAsset.ACM | 5.6-7 | ACM-2 |
| IXIT 18-AccCtrl | ID, Description | - | 5.6-8 | - |
| IXIT 19-SecDev | ID, Description | - | 5.6-9 | - |
| IXIT 20-SecBoot | ID, Description, Security Guarantees, Detection Mechanisms, User Notification, Notification Functionality | E.Info.PartOfSoftw, E.Info.BootProcess, E.Info.BootProcess.TrustAnchor, E.Info.BootProcess.SecMech, E.Info.BootProcess.Modes | 5.7-1, 5.7-2 | GEC-8 |
| IXIT 21-PersData | ID, Description, Secure Communication Mechanisms, Processing Activities, Sensitive, Purpose, Authorized Parties, Lifecycle, Obtaining Consent, Withdrawing Consent, Storing Consent, Processing Activitie, Aggregation, Anonymization | E.Info.SecurityAsset, E.Info.SecurityAsset.Environment, E.Info.SecurityAsset.Class, E.Info.SecurityAsset.Com, E.Info.SecurityAsset.NetworkInterface, E.Info.SecurityAsset.TrustedEnv, E.Info.SecurityAsset.AddMeasures, E.Info.NetworkAsset, E.Info.NetworkAsset.Environment, E.Info.NetworkAsset.Class, E.Info.NetworkAsset.Com, E.Info.NetworkAsset.NetInterface, E.Info.NetworkAsset.AddMeasures, E.Info.PrivacyAsset, E.Info.PrivacyAsset.class, E.Info.PrivacyAsset.Com, E.Info.PrivacyAsset.NetInterface, E.Info.PrivacyAsset.TrustedEnv, E.Info.PrivacyAsset.AddMeasures, E.Info.FinancialAsset, E.Info.FinancialAsset.class, E.Info.FinancialAsset.Com, E.Info.FinancialAsset.NetworkInterface, E.Info.SCM, E.Info.SCM.Protocol, E.Info.SCM.States, E.Info.SCM.SecObjectives, E.Info.SCM.Manage, E.Info.SCM.Capabilities, E.Info.SCM.MessageEnc, E.Info.SCM.ChannelEnc, E.Info.SCM.Generic, E.Info.SCM.ImplDetail, E.Info.SCM.CCK, E.Info.SCM.ThreatProtection, E.Info.NetworkInterface, E.Info.NetworkInterface.Protocol, E.Info.NetworkInterface.Radio, E.Info.NetworkInterface.Wired, E.Info.NetworkInterface.Optical, E.Info.NetworkInterface.Acoustic, E.Info.Assets, E.Info.Assets.Cryptography, E.Info.Assets.Deviation, E.Info.PersonalInformation, E.Info.PersonalInformation.UseCase, E.Info.PersonalInformation.UseCase.Notification, E.Info.PersonalInformation.UseCase.OtherInfo, E.Info.Notification, E.Info.Notification.UseCase, E.Info.Notification.UseCase.Content | 5.8-1, 5.8-2, 5.11-2, 5.11-3, 6-1, 6-2, 6-3A, 6-3B, 6-4, 6-6, 6-7, 6-8 | AUM-5-1, AUM-5-2, CCK-3, CRY-1, SCM-1, SCM-3, UNM-1, UNM-2 |
| IXIT 22-ExtSens | ID, Description | E.Info.NetworkAsset, E.Info.UserDoc.NonNetworkInterface, E.Info.NonNetworkInterface | 5.8-3 | GEC-7 |
| IXIT 23-ResMech | ID, Description, Security Guarantees, Type | E.Info.NetworkInterface, E.Info.RLM, E.Info.PersonalData, E.Info.SenSecParam, E.Info.DLM | 5.9-1, 5.9-2 | DLM-1, RLM-1 |
| IXIT 24-TelData | ID, Description, Security Examination, Purpose, Personal Data | - | 5.10-1, 6-4, 6-5 | - |
| IXIT 25-DelFunc | ID, Description, Target Type, Initiation and Interaction, Confirmatio | E.Info.PersonalData, E.Info.SenSecParam, E.Info.DLM | 5.11-1, 5.11-2, 5.11-3, 5.11-4 | AUM-5-1, AUM-5-2, CCK-3 |
| IXIT 26-UserDec | ID, Description, Options, Triggered By | E.Info.SUM, E.Info.SUM.Automation | 5.3-4B, 5.12-1, 5.12-2 | AUM-2, AUM-5-1, AUM-5-2, SUM-3 |
| IXIT 27-UserIntf | ID, Description, Type | E.Info.SecurityAsset, E.Info.PrivacyAsset, E.Info.FinancialAsset, E.Info.ExternalInterface, E.Info.ExternalInterface.Capabilities, E.Info.ExternalInterface.Validation | 5.13-1A | AUM-2, AUM-5-1, AUM-5-2, CCK-2, CRY-1 |
| IXIT 28-LogIntf | ID, Description, Access, Status, Disclosed Information, Resilience Measures | E.Info.SecurityAsset, E.Info.NetworkAsset, E.Info.PrivacyAsset, E.Info.FinancialAsset, E.Info.NetworkInterface.Exposure, E.Info.Setup, E.Info.PhysicalExternalInterface, E.Info.PhysicalExternalInterface.Purpose, E.Info.PhysicalExternalInterface.Type, E.Info.IntFunc, E.Info.ExternalInterface, E.Info.ExternalInterface.Capabilities, E.Info.ExternalInterface.Validation | 5.6-1, 5.6-2, 5.9-3, 5.13-1B | AUM-2, AUM-5-1, AUM-5-2, CCK-2, CRY-1, GEC-2, GEC-5 |
| IXIT 29-InpVal | ID, Description, Source | E.Info.SecurityAsset, E.Info.PrivacyAsset, E.Info.FinancialAsset, E.Info.ExternalInterface, E.Info.ExternalInterface.Capabilities, E.Info.ExternalInterface.Validation | 5.13-1A, 5.13-1B | AUM-2, AUM-5-1, AUM-5-2, CCK-2, CRY-1 |
Mapping 2
From EN 18031 to IXIT
For each EN 18031 security mechanism: the EN 303 645 provisions that address it, the IXIT fields that already document it and the E.Info items to provide. A dash means the mechanism has no equivalent in EN 303 645 and needs its own documentation.
| EN 18031 security mechanism | EN 303 645 provision | TS 103 701 IXIT | E.Info |
|---|---|---|---|
| [ACM-1] Applicability of access control mechanisms | 5.5-4, 5.5-5 | IXIT 1-AuthMech: ID, Description, Security Guarantees, Cryptographic Details IXIT 13-SoftServ: ID, Description, Authentication Mechanism, IXIT 1-AuthMech: ID, Description, Security Guarantees, Cryptographic Details IXIT 13-SoftServ: ID, Description, Allows Configuration, Authentication Mechanism |
E.Info.SecurityAsset, E.Info.SecurityAsset.Access, E.Info.SecurityAsset.PublicAccess, E.Info.SecurityAsset.Environment, E.Info.SecurityAsset.Legal, E.Info.SecurityAsset.ACM, E.Info.NetworkAsset, E.Info.NetworkAsset.Access, E.Info.NetworkAsset.PublicAccess, E.Info.NetworkAsset.Environment, E.Info.NetworkAsset.Legal, E.Info.NetworkAsset.ACM, E.Info.PrivacyAsset, E.Info.PrivacyAsset.Access, E.Info.PrivacyAsset.PublicAccess, E.Info.PrivacyAsset.Environment, E.Info.PrivacyAsset.Legal, E.Info.PrivacyAsset.ACM, E.Info.FinancialAsset, E.Info.FinancialAsset.Access, E.Info.FinancialAsset.PublicAccess, E.Info.FinancialAsset.Environment, E.Info.FinancialAsset.Legal, E.Info.FinancialAsset.ACM |
| [ACM-2] Appropriate access control mechanisms | 5.5-5, 5.6-7 | IXIT 1-AuthMech: ID, Description, Security Guarantees, Cryptographic Details IXIT 13-SoftServ: ID, Description, Allows Configuration, Authentication Mechanism, IXIT 17-PrivlCtrl: ID, Description |
E.Info.SecurityAsset, E.Info.SecurityAsset.ACM, E.Info.NetworkAsset, E.Info.NetworkAsset.ACM, E.Info.PrivacyAsset, E.Info.PrivacyAsset.ACM, E.Info.FinancialAsset, E.Info.FinancialAsset.ACM |
| [ACM-3] Default access control for children in toys | - | - | E.Info.PrivacyAsset, E.Info.PrivacyAsset.TrustedSources, E.Info.ACM |
| [ACM-4] Default access control to children's privacy assets for toys and childcare equipment | - | - | E.Info.PrivacyAsset, E.Info.ACM, E.Info.AuthorisedAccess |
| [ACM-5] Parental/Guardian access controls for children in toys | 5.5-5 | IXIT 1-AuthMech: ID, Description, Security Guarantees, Cryptographic Details IXIT 13-SoftServ: ID, Description, Allows Configuration, Authentication Mechanism |
E.Info.SecurityAsset, E.Info.PrivacyAsset, E.Info.ACM |
| [ACM-6] Parental/Guardian access controls for other entities' access to managed children's privacy assets in toys | 5.5-5 | IXIT 1-AuthMech: ID, Description, Security Guarantees, Cryptographic Details IXIT 13-SoftServ: ID, Description, Allows Configuration, Authentication Mechanism |
E.Info.PrivacyAsset, E.Info.ACM |
| [AUM-1-1] Applicability of authentication mechanisms (network interface) | 5.5-4, 5.5-5 | IXIT 1-AuthMech: ID, Description, Security Guarantees, Cryptographic Details IXIT 13-SoftServ: ID, Description, Authentication Mechanism, IXIT 1-AuthMech: ID, Description, Security Guarantees, Cryptographic Details IXIT 13-SoftServ: ID, Description, Allows Configuration, Authentication Mechanism |
E.Info.ACM, E.Info.ACM.NetworkInterface, E.Info.ACM.ManagedAccessNetworkAsset, E.Info.ACM.ManagedAccessPrivacyAsset, E.Info.ACM.ManagedAccessFinancialAsset, E.Info.ACM.ManagedAccessSecurityAsset, E.Info.ACM.IntendedFunctionality, E.Info.ACM.AuthorizedEntity, E.Info.ACM.AuthenticationMechanism |
| [AUM-1-2] Applicability of authentication mechanisms (user information) | 5.5-4, 5.5-5 | IXIT 1-AuthMech: ID, Description, Security Guarantees, Cryptographic Details IXIT 13-SoftServ: ID, Description, Authentication Mechanism, IXIT 1-AuthMech: ID, Description, Security Guarantees, Cryptographic Details IXIT 13-SoftServ: ID, Description, Allows Configuration, Authentication Mechanism |
E.Info.ACM, E.Info.ACM.UserInterfaces, E.Info.ACM.ManagedAccessNetworkAsset, E.Info.ACM.ManagedAccessPrivacyAsset, E.Info.ACM.ManagedAccessFinancialAsset, E.Info.ACM.ManagedAccessSecurityAsset, E.Info.ACM.IntendedEnvironment, E.Info.ACM.AuthenticationMechanism, E.Info.ACM.ReadOnlyFunctionality, E.Info.ACM.ReadOnlyLegal |
| [AUM-1-3] Requirement machine interface | 5.5-4, 5.5-5 | IXIT 1-AuthMech: ID, Description, Security Guarantees, Cryptographic Details IXIT 13-SoftServ: ID, Description, Authentication Mechanism, IXIT 1-AuthMech: ID, Description, Security Guarantees, Cryptographic Details IXIT 13-SoftServ: ID, Description, Allows Configuration, Authentication Mechanism |
E.Info.ACM, E.Info.ACM.MachineInterfaces, E.Info.ACM.ManagedAccessFinancialAsset, E.Info.ACM.ManagedAccessSecurityAsset, E.Info.ACM.AuthenticationMechanism |
| [AUM-2] Appropriate authentication mechanisms | 5.1-2A, 5.1-3 | IXIT 1-AuthMech: ID, Description, Authentication Factor, Password Generation Mechanism, IXIT 1-AuthMech: ID, Description, Authentication Factor, IXIT 1-AuthMech: ID, Description, Security Guarantees, Cryptographic Details | E.Info.AuthenticationMechanism, E.Info.AuthenticationMechanism.AuthFactor |
| [AUM-3] Authenticator validation | - | - | E.Info.AUM, E.Info.AUM.AuthVal, E.Info.AUM.AuthEnv |
| [AUM-4] Changing authenticators | 5.1-4 | IXIT 1-AuthMech: ID, Description IXIT 2-UserInfo: Documentation of Change Mechanisms |
E.Info.AUM, E.Info.AUM.ConfSecGoal, E.Info.AUM.AuthChange |
| [AUM-5-1] Password strength (factory) | 5.1-1, 5.1-2, 5.1-3 | IXIT 1-AuthMech: ID, Description, Authentication Factor, Password Generation Mechanism, IXIT 1-AuthMech: ID, Description, Authentication Factor, Password Generation Mechanism, IXIT 1-AuthMech: ID, Description, Security Guarantees, Cryptographic Details | E.Info.AUM, E.Info.AUM.PwdProperty, E.Info.AUM.UniqueBestPractice, E.Info.AUM.EnforceSettingFirstUse |
| [AUM-5-2] Password strength (non-factory) | 5.1-1, 5.1-2, 5.1-3 | IXIT 1-AuthMech: ID, Description, Authentication Factor, Password Generation Mechanism, IXIT 1-AuthMech: ID, Description, Authentication Factor, Password Generation Mechanism, IXIT 1-AuthMech: ID, Description, Security Guarantees, Cryptographic Details | E.Info.AUM, E.Info.AUM.PwdProperty, E.Info.AUM.DefinedAuthEntity, E.Info.AUM.EquipmentGenerated |
| [AUM-6] Brute force protection | 5.1-5 | IXIT 1-AuthMech: ID, Description, Brute Force Prevention | E.Info.AUM, E.Info.AUM.BFProtection |
| [SUM-1] Applicability of update mechanisms | 5.3-1, 5.3-2, 5.3-15A, 5.3-15B | IXIT 6-SoftComp: ID, Description, Update Mechanism IXIT 7-UpdMech: ID, Description, Security Guarantees, Cryptographic Details, Initiation and Interaction, IXIT 7-UpdMech: ID, Description, Security Guarantees, Cryptographic Details, Initiation and Interaction, IXIT 9-ReplSup: Isolation, IXIT 9-ReplSup: Hardware Replacement |
E.Info.PartOfSoftw, E.Info.PartOfSoftw.FuncSaftyImp, E.Info.PartOfSoftw.Immutable, E.Info.PartOfSoftw.AltMeasures, E.Info.PartOfSoftw.SUM |
| [SUM-2] Secure updates | 5.3-9, 5.3-10 | IXIT 6-SoftComp: ID, Description, Update Mechanism IXIT 7-UpdMech: ID, Description, Security Guarantees, Cryptographic Details, Initiation and Interaction, IXIT 7-UpdMech: ID, Description, Security Guarantees, Cryptographic Details, IXIT 7-UpdMech: ID, Description, Security Guarantees |
E.Info.SUM, E.Info.SUM.Sign, E.Info.SUM.SecChan, E.Info.SUM.AccContMech, E.Info.SUM.Generic |
| [SUM-3] Automated updates | 5.3-3, 5.3-4A, 5.3-4B, 5.3-5, 5.3-6A | IXIT 6-SoftComp: ID, Description, Update Mechanism IXIT 7-UpdMech: ID, Description, Initiation and Interaction, IXIT 7-UpdMech: ID, Description, Configuration, IXIT 7-UpdMech: ID, Description, Configuration IXIT 26-UserDec: ID, Description, IXIT 7-UpdMech: ID, Description, Update Checking, IXIT 7-UpdMech: ID, Description, Initiation and Interaction, Configuration |
E.Info.SUM, E.Info.SUM.Automation |
| [SSM-1] Applicability of secure storage mechanisms | 5.4-1, 5.6-3 | IXIT 10-SecParam: ID, Description, Type, Security Guarantees, Protection Scheme, IXIT 15-PhyIntf: ID, Description, Status, Protection | E.Info.SecurityAsset, E.Info.SecurityAsset.Environment, E.Info.SecurityAsset.SSM, E.Info.NetworkAsset, E.Info.NetworkAsset.Environment, E.Info.NetworkAsset.SSM, E.Info.PrivacyAsset, E.Info.PrivacyAsset.Environment, E.Info.PrivacyAsset.SSM, E.Info.FinancialAsset, E.Info.FinancialAsset.Environment, E.Info.FinancialAsset.SSM |
| [SSM-2] Appropriate integrity protection for secure storage mechanisms | 5.4-1, 5.4-2 | IXIT 10-SecParam: ID, Description, Type, Security Guarantees, Protection Scheme, IXIT 10-SecParam: ID, Description, Type, Security Guarantees, Protection Scheme | E.Info.SSM, E.Info.SSM.Asset, E.Info.SSM.DigitalSignature, E.Info.SSM.AccessControl, E.Info.SSM.OTProgrammable, E.Info.SSM.HardwareProtection, E.Info.SSM.Generic, E.Info.SSM.ComplianceEvidence |
| [SSM-3] Appropriate confidentiality protection for secure storage mechanisms | 5.4-1 | IXIT 10-SecParam: ID, Description, Type, Security Guarantees, Protection Scheme | E.Info.SSM, E.Info.SSM.Asset, E.Info.SSM.Encryption, E.Info.SSM.AccessControl, E.Info.SSM.HardwareProtection, E.Info.SSM.Generic, E.Info.SSM.ComplianceEvidence |
| [SCM-1] Applicability of secure communication mechanisms | 5.5-6, 5.5-7, 5.8-1, 5.8-2 | IXIT 10-SecParam: ID, Description, Type, Secure Communication Mechanisms IXIT 11-SecComMech: ID, Description, Security Guarantees, Cryptographic Details, IXIT 10-SecParam: ID, Description, Type, Secure Communication Mechanisms IXIT 11-SecComMech: ID, Description, Security Guarantees, Cryptographic Details, IXIT 11-SecComMech: ID, Description, Security Guarantees, Cryptographic Details IXIT 21-PersData: ID, Description, Secure Communication Mechanisms, IXIT 11-SecComMech: ID, Description, Security Guarantees, Cryptographic Details IXIT 21-PersData: ID, Description, Processing Activities, Secure Communication Mechanisms, Sensitive |
E.Info.SecurityAsset, E.Info.SecurityAsset.Environment, E.Info.SecurityAsset.Class, E.Info.SecurityAsset.Com, E.Info.SecurityAsset.NetworkInterface, E.Info.SecurityAsset.TrustedEnv, E.Info.SecurityAsset.AddMeasures, E.Info.NetworkAsset.Environment, E.Info.NetworkAsset.Class, E.Info.NetworkAsset.Com, E.Info.NetworkAsset.NetInterface, E.Info.NetworkAsset.AddMeasures, E.Info.PrivacyAsset, E.Info.PrivacyAsset.class, E.Info.PrivacyAsset.Com, E.Info.PrivacyAsset.NetInterface, E.Info.PrivacyAsset.TrustedEnv, E.Info.PrivacyAsset.AddMeasures, E.Info.FinancialAsset, E.Info.FinancialAsset.class, E.Info.FinancialAsset.Com, E.Info.FinancialAsset.NetworkInterface, E.Info.SCM, E.Info.SCM.Protocol, E.Info.SCM.States, E.Info.SCM.SecObjectives, E.Info.SCM.Manage, E.Info.NetworkInterface, E.Info.NetworkInterface.Protocol, E.Info.NetworkInterface.Radio, E.Info.NetworkInterface.Wired, E.Info.NetworkInterface.Optical, E.Info.NetworkInterface.Acoustic |
| [SCM-2] Appropriate integrity and authenticity protection for secure communication mechanisms | - | - | E.Info.SecurityAsset, E.Info.SecurityAsset.Com, E.Info.NetworkAsset, E.Info.NetworkAsset.Class, E.Info.NetworkAsset.Com, E.Info.NetworkAsset.NetInterface, E.Info.NetworkAsset.AddMeasures, E.Info.PrivacyAsset, E.Info.PrivacyAsset.Com, E.Info.FinancialAsset, E.Info.FinancialAsset.Com, E.Info.SCM, E.Info.SCM.Capabilities, E.Info.SCM.ManufSecret, E.Info.SCM.SecChanExchange, E.Info.SCM.PKI-Based, E.Info.SCM.ThirdPartyTrust, E.Info.SCM.Generic, E.Info.SCM.ImplDetail, E.Info.SCM.CCK, E.Info.SCM.ThreatProtection, E.Info.NetworkInterface, E.Info.NetworkInterface.Protocol |
| [SCM-3] Appropriate confidentiality protection for secure communication mechanisms | 5.5-6, 5.5-7, 5.8-1, 5.8-2 | IXIT 10-SecParam: ID, Description, Type, Secure Communication Mechanisms IXIT 11-SecComMech: ID, Description, Security Guarantees, Cryptographic Details, IXIT 10-SecParam: ID, Description, Type, Secure Communication Mechanisms IXIT 11-SecComMech: ID, Description, Security Guarantees, Cryptographic Details, IXIT 11-SecComMech: ID, Description, Security Guarantees, Cryptographic Details IXIT 21-PersData: ID, Description, Secure Communication Mechanisms, IXIT 11-SecComMech: ID, Description, Security Guarantees, Cryptographic Details IXIT 21-PersData: ID, Description, Processing Activities, Secure Communication Mechanisms, Sensitive |
E.Info.SecurityAsset, E.Info.SecurityAsset.Com, E.Info.NetworkAsset, E.Info.NetworkAsset.Com, E.Info.PrivacyAsset, E.Info.PrivacyAsset.Com, E.Info.FinancialAsset, E.Info.FinancialAsset.Com, E.Info.SCM, E.Info.SCM.Capabilities, E.Info.SCM.MessageEnc, E.Info.SCM.ChannelEnc, E.Info.SCM.Generic, E.Info.SCM.ImplDetail, E.Info.SCM.CCK, E.Info.SCM.ThreatProtection, E.Info.NetworkInterface, E.Info.NetworkInterface.Protocol |
| [SCM-4] Appropriate replay protection for secure communication mechanisms | 5.5-1 | IXIT 11-SecComMech: ID, Description, Security Guarantees, Cryptographic Details | E.Info.SecurityAsset, E.Info.SecurityAsset.Com, E.Info.NetworkAsset, E.Info.NetworkAsset.Com, E.Info.PrivacyAsset, E.Info.PrivacyAsset.Com, E.Info.FinancialAsset, E.Info.FinancialAsset.Com, E.Info.SCM, E.Info.SCM.Capabilities, E.Info.SCM.SeqNumber, E.Info.SCM.TimeStamp, E.Info.SCM.OneTimeEncKey, E.Info.SCM.Generic, E.Info.SCM.ImplDetail, E.Info.SCM.Repudiation, E.Info.NetworkInterface, E.Info.NetworkInterface.Protocol |
| [RLM-1] Applicability and appropriateness of resilience mechanisms | 5.9-1 | IXIT 23-ResMech: ID, Description, Security Guarantees | E.Info.NetworkInterface, E.Info.RLM |
| [NMM-1] Applicability of and appropriate network monitoring mechanisms | - | - | E.Info.NMM, E.Info.NMM.GTPFiltering, E.Info.NMM.IPPacketFiltering, E.Info.NMM.NetworkEquipment |
| [TCM-1] Applicability of and appropriate traffic control mechanisms | - | - | E.Info.TCM, E.Info.TCM.DatagramRules, E.Info.TCM.TrafficSeparation, E.Info.TCM.NetworkEquipment |
| [LGM-1] Applicability of logging mechanisms | - | - | E.Info.PrivacyAssetEvent, E.Info.PrivacyAssetEvent.Legal, E.Info.PrivacyAssetEvent.LGM, E.Info.FinancialAssetEvent, E.Info.FinancialAssetEvent.Legal, E.Info.FinancialAssetEvent.LGM |
| [LGM-2] Logging mechanisms – Persistent storage | - | - | E.Info.LGM, E.Info.LGM.InternalStorage, E.Info.LGM.ExternalStorage |
| [LGM-3] Logging mechanisms – Minimum number of Events | - | - | E.Info.Events, E.Info.Quantity |
| [LGM-4] Logging mechanisms – Time related information | - | - | E.Info.LGM, E.Info.LGM.TimeStamp, E.Info.LGM.TimeRelated, E.Info.Events |
| [DLM-1] Applicability of deletion mechanisms | 5.9-1, 5.11-1 | IXIT 23-ResMech: ID, Description, Security Guarantees, IXIT 25-DelFunc: ID, Description, Target Type, Initiation and Interaction | E.Info.PersonalData, E.Info.SenSecParam, E.Info.DLM |
| [UNM-1] Applicability of user notification mechanisms | 6-1 | IXIT 21-PersData: ID, Description, Purpose, Authorized Parties, Lifecycle | E.Info.PersonalInformation, E.Info.PersonalInformation.UseCase, E.Info.PersonalInformation.UseCase.Notification, E.Info.PersonalInformation.UseCase.OtherInfo |
| [UNM-2] Content of user notification | 6-1 | IXIT 21-PersData: ID, Description, Purpose, Authorized Parties, Lifecycle | E.Info.Notification, E.Info.Notification.UseCase, E.Info.Notification.UseCase.Content |
| [CCK-1] Appropriate CCKs | - | - | E.Info.CCK, E.Info.CCK.Deviation, E.Info.CCK.SecurityStrength |
| [CCK-2] CCK generation mechanisms | 5.1-3 | IXIT 1-AuthMech: ID, Description, Security Guarantees, Cryptographic Details | E.Info.Generation, E.Info.Generation.CCK, E.Info.Generation.RNSource, E.Info.Generation.RNG, E.Info.Generation.Implementation, E.Info.Generation.Deviation |
| [CCK-3] Preventing static default values for preinstalled CCKs | 5.1-1, 5.4-4 | IXIT 1-AuthMech: ID, Description, Authentication Factor, Password Generation Mechanism, IXIT 10-SecParam: ID, Description, Type, Generation Mechanism | E.Info.CCK, E.Info.CCK.Controlled, E.Info.CCK.Shared, E.Info.CCK.Unique |
| [GEC-1] Up-to-date software and hardware with no publicly known exploitable vulnerabilities | 5.2-1, 5.2-2, 5.2-3 | IXIT 2-UserInfo: Publication of Vulnerability Disclosure Policy, IXIT 2-UserInfo: Publication of Vulnerability Disclosure Policy IXIT 3-VulnTypes: D, Description, Action, Time Frame IXIT 4-Conf: Confirmation of Vulnerability Actions, IXIT 4-Conf: Confirmation of Vulnerability Monitoring IXIT 5-VulnMon: ID, Description |
E.Info.SecurityAsset, E.Info.PrivacyAsset, E.Info.FinancialAsset, E.Info.SoftwareDocumentation, E.Info.HardwareDocumentation, E.Info.ListOfVulnerabilities, E.Info.ListOfVulnerabilities.Remediated, E.Info.ListOfVulnerabilities.SpecificCondition, E.Info.ListOfVulnerabilities.Mitgated, E.Info.ListOfVulnerabilities.Accepted |
| [GEC-2] Limit exposure of services via related network interfaces | 5.6-1, 5.6-5 | IXIT 15-PhyIntf: ID, Description, Type, Status IXIT 28-LogIntf: ID, Description, Access, Status, IXIT 13-SoftServ: ID, Description, Status, Justification, IXIT 21-PersData: ID, Description, Purpose, Authorized Parties, Lifecycle |
E.Info.SecurityAsset, E.Info.NetworkAsset, E.Info.PrivacyAsset, E.Info.FinancialAsset, E.Info.NetworkInterface.Exposure, E.Info.Setup |
| [GEC-3] Configuration of optional services and the related exposed network interfaces | - | - | E.Info.SecurityAsset, E.Info.NetworkAsset, E.Info.PrivacyAsset, E.Info.FinancialAsset, E.Info.NetworkInterface.Exposure |
| [GEC-4] Documentation of exposed network interfaces and exposed services via network interfaces | - | - | E.Info.NetworkAsset, E.Info.NetworkInterface.Exposure, E.Info.UserDoc, E.Info.UserDoc.NetworkInterface, E.Info.UserDoc.NetworkInterface |
| [GEC-5] No unnecessary external interfaces | 5.6-1, 5.6-3, 5.6-4B | IXIT 15-PhyIntf: ID, Description, Type, Status IXIT 28-LogIntf: ID, Description, Access, Status, IXIT 15-PhyIntf: ID, Description, Status, Protection, IXIT 15-PhyIntf: ID, Description, Type, Debug Interface, Protection, IXIT 21-PersData: ID, Description, Purpose, Authorized Parties, Lifecycle |
E.Info.PhysicalExternalInterface, E.Info.PhysicalExternalInterface.Purpose, E.Info.PhysicalExternalInterface.Type, E.Info.IntFunc |
| [GEC-6] Input validation | 5.13-1A, 5.13-1B | IXIT 27-UserIntf: ID, Description, Type IXIT 29-InpVal: ID, Description, Source, IXIT 28-LogIntf: ID, Description, Access IXIT 29-InpVal: ID, Description, Source |
E.Info.SecurityAsset, E.Info.PrivacyAsset, E.Info.FinancialAsset, E.Info.ExternalInterface, E.Info.ExternalInterface.Capabilities, E.Info.ExternalInterface.Validation |
| [GEC-7] Documentation of external sensing capabilities | 5.8-3 | IXIT 2-UserInfo: Documentation of Sensors IXIT 22-ExtSens: ID, Description |
E.Info.NetworkAsset, E.Info.UserDoc.NonNetworkInterface, E.Info.NonNetworkInterface |
| [GEC-8] Equipment Integrity | 5.7-1, 5.7-2 | IXIT 20-SecBoot: ID, Description, Security Guarantees, Detection Mechanisms, IXIT 20-SecBoot: ID, Description, User Notification, Notification Functionality | E.Info.PartOfSoftw, E.Info.BootProcess, E.Info.BootProcess.TrustAnchor, E.Info.BootProcess.SecMech, E.Info.BootProcess.Modes |
| [CRY-1] Best practice Cryptography | 5.1-3, 5.3-7, 5.5-1, 5.5-2, 5.5-3, 5.8-1, 5.8-2 | IXIT 1-AuthMech: ID, Description, Security Guarantees, Cryptographic Details, IXIT 7-UpdMech: ID, Description, Security Guarantees, Cryptographic Details, IXIT 11-SecComMech: ID, Description, Security Guarantees, Cryptographic Details, IXIT 12-NetSecImpl: ID, Description, Review/Evaluation Method, Report, IXIT 6-SoftComp: ID, Description, Update Mechanism, Cryptographic Usage, IXIT 11-SecComMech: ID, Description, Security Guarantees, Cryptographic Details IXIT 21-PersData: ID, Description, Secure Communication Mechanisms, IXIT 11-SecComMech: ID, Description, Security Guarantees, Cryptographic Details IXIT 21-PersData: ID, Description, Processing Activities, Secure Communication Mechanisms, Sensitive |
E.Info.Assets, E.Info.Assets.Cryptography, E.Info.Assets.Deviation |
Start here
Build your IXIT list first
ICS2IXIT turns your EN 303 645 ICS into the list of TS 103 701 IXITs to document. Once the IXITs are written, the mappings above tell you which EN 18031 items they already cover.
Open ICS2IXIT