Trusted Computing Exemplar: Configuration Management Procedures

Abstract

This document describes the Life Cycle Management Plan for the development of a high assurance secure product. A high assurance product is one for which its users have a high level of confidence that its security policies will be enforced continuously and correctly. Such products are constructed so that they can be analyzed for these characteristics. Lifecycle activities ensure that the product reflects the intent to ensure that the product is trustworthy and that vigorous efforts have been made to ensure the absence of unspecified functionality, whether accidental or intentional. The purpose of this document is to outline the procedures for the Configuration Management (CM) process. These procedures are meant to provide lower-level details necessary to implement the process laid out in the Configuration Management Plan and to ensure consistency in the exercise of the process. Additional procedures are provided to interface with CM-specific applications, as described in Appendix H.