Trusted Computing Exemplar: Life Cycle Management Plan

Abstract

This document describes the Life Cycle Management Plan for the development of a high assurance secure product. A high assurance product is one for which its users have a high level of confidence that its security policies will be enforced continuously and correctly. Such products are constructed so that they can be analyzed for these characteristics. Lifecycle activities ensure that the product reflects the intent to ensure that the product is trustworthy and that vigorous efforts have been made to ensure the absence of unspecified functionality, whether accidental or intentional. The overall purpose and guiding principle for this document is to provide a methodology that will result in the creation of a product that will have a high level of assurance.