Software Assurance
What is Software Assurance?
The level of confidence that software functions as intended, is free of vulnerabilities, and provides a required level of security.
Terms that appear alongside software assurance
Each of these is named in at least one of the same controls as software assurance. The number is how many controls name both.
- integrity 6 shared controls
- data integrity 6 shared controls
- compliance 5 shared controls
- audit 4 shared controls
- risk assessment 3 shared controls
- risk based approach 3 shared controls
- audit trail 3 shared controls
- software bill of materials 2 shared controls
Frameworks that govern software assurance
What the standards actually require on software assurance
Requirements naming software assurance across 4 standards, quoted from the control text.
Apply secure development, code review and verification to flight software, payload firmware and on-board autonomy components.
SISAC-08 · Flight Software Assurance →21 CFR Part 11 has been in force since 20 August 1997 (Final Rule published 20 March 1997 + effective 20 August 1997). The 2003 FDA Scope and Application Guidance significantly narrowed enforcement scope using a risk-based approach + announced enforcement disc...
Part11.Status · 21 CFR Part 11 - corpus status, FDA enforcement landscape, CSA transition →The procedures and tools for preparing application data comply with this standard: tools developed for the purpose meet clause 6.7 (data preparation tools are generally T3), the compilation or generation process that handles the data and algorithms is validate...
en-50126-en-50128-en-50129-railway-applications-rams::50128:8.4.7 · Application data or algorithms preparation procedures and tools →The guidance applies to initial and amended type certificates and supplemental type certificates for aircraft, aircraft systems and engine and propeller systems connecting to internal or external data networks and services: field loading of software, maintenan...
faa-aircraft-systems-information-security-protection-asisp::AC20.5-6 · AC20.5-6 Scope of the ASISP guidance and field loadable software →Questions people ask about software assurance
What is Software Assurance?
Why is Software Assurance important for compliance?
Which compliance frameworks address Software Assurance?
Where can I learn more about Software Assurance?
See how Software Assurance applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.