The Security Processes (Sc-Pr) domain shows the specification of the Security Control families, security controls, and measures required to address a specific security baseline. It provides a set of Security Controls and any possible enhancements as applicable to assets. The activity diagram describes operational or resource level processes that apply (operational level) or implement (resource level) security controls/enhancements to assets located in enclaves and across enclaves. This Security Process domain can be instantiated either as a variant of an activity/flow diagram or as a hierarchical work breakdown structure.
Implementation
The Security Processes (Sc-Pr) domain is represented by: