Control StaticData
URI: StaticData
Package: Application
Description: This control signifies that data is static, i.e. inserted into the system during deployment and never changed.
Represents a class of data items that can be stored on Hosts, or processed and exchanged by Processes. Note that this asset represents the presence of data in the system. Physical copies of the data are represented by inferred assets linked with Processes that serve or use them, hosts where they are stored. |
Data Data is static data inserted into the system on deployment and not altered subsequently by any process in the system. This control strategy is used to negate modelling error threats that detect cases where data is not created by any process. |