Documentation SummaryΒΆ

Document Description Produced By Disclosure(s)
Registered Technology Provider Request (excluding Organizational Security Audit) Information submitted by RTP to the Administrator Registered Technology Provider Public
Organizational Security Audit Information submitted by RTP to the Administrator annually Registered Technology Provider Subscribers
Subscriber Agreement The agreement completed by the Subscriber to be given access to sensitive information. Subscriber List of subscribers will be maintained on the RABET-V Portal
Product Goals Overview of what the product is intended to do Registered Technology Provider Public
Expected Usage Statements of how the product is intended to be used Registered Technology Provider Public
Security Claims Claims of which requirements are met by the product Registered Technology Provider Subscribers
Process Descriptions Descriptions of how the provider does product development Registered Technology Provider RABET-V Administrator only
Architecture Documentation and Diagrams Documentation on how the product is constructed Registered Technology Provider RABET-V Administrator only
Third-Party Component Details Listing of the 3rd party software packages used by or included in the product Registered Technology Provider RABET-V Administrator only
User Documentation Documentation intended to help non-technical users use the product Registered Technology Provider Subscribers
Product Revision Submission Artifacts Outputs of the providers internal product development process Registered Technology Provider RABET-V Administrator only
Submission Review Checklist Checklist completed during the Submission Review activity RABET-V Administrator, or agent Registered Technology Provider
SAMM Toolkit and interview session notes Interview and scoring toolkit used for the Process Assessment RABET-V Administrator, or agent Registered Technology Provider
Reliable Artifacts Evaluation Produced by the Process Assessment and used for Testing Rules RABET-V Administrator, or agent Registered Technology Provider
Security Service Architecture Produced by the Architecture Review and used for maturity evaluation RABET-V Administrator, or agent Registered Technology Provider
List of Applicable and Not Applicable Security Requirements A determination made during the Security Claims Review based on the product goals and expected usage RABET-V Administrator, or agent Registered Technology Provider, Subscribers
Security Service Architectural Maturity Scores Scores developed during the Architecture Review activity RABET-V Administrator, or agent Registered Technology Provider, Subscribers
Software Development Maturity Scores Scores developed during the Process Assessment activity RABET-V Administrator, or agent Registered Technology Provider, Subscribers
Testing Rules Decision Tree Decision formula for determining how to test product changes RABET-V Administrator, or agent Registered Technology Provider, Subscribers
Product Verification Test Results Results produced by testing the product against the requirements RABET-V Administrator, or agent Registered Technology Provider, Subscribers
Security Service Capability Maturity Scores Scores developed based on the results of the Product Verification activity RABET-V Administrator, or agent Registered Technology Provider, Subscribers
RABET-V Product Provider Report Report which captures the main outputs of the RABET-V iteration RABET-V Administrator, or agent Registered Technology Provider, Subscribers
RABET-V Product Public Report Report which captures the main outputs of the RABET-V iteration RABET-V Administrator, or agent Public