diff --git a/docs/irap-poam.md b/docs/irap-poam.md index fa537f4..f745b1e 100644 --- a/docs/irap-poam.md +++ b/docs/irap-poam.md @@ -1,17 +1,5 @@ # Plan of Action & Milestones (POA&M) — Diskless Fleet Boot System -> **Protective marking:** `STARFLEET RESTRICTED — CLEARANCE LEVEL 2 — BRIDGE CREW / SECURITY DIVISION` -> *(marking scheme: `STARFLEET ROUTINE` ≈ OFFICIAL · `STARFLEET RESTRICTED` ≈ -> OFFICIAL: Sensitive · `STARFLEET SECRET` ≈ PROTECTED · `OMEGA DIRECTIVE` ≈ -> SECRET and above — see the [SAR](irap-sar.md) banner.)* -> -> **Source:** IRAP security assessment 2026-07-10 — see the -> [Security Assessment Report](irap-sar.md). Weaknesses derive from the SSP -> [Annex A residual-risk register](ssp-annex-a-ism-residual-risk.md) (R-NN) and -> the assessor's additional findings (F-NN, SAR §5.2). The repo's -> [TODO.md](TODO.md) remains the engineering-level working backlog; this POA&M -> is the authorisation-facing view and the two must be kept in sync. - | Field | Value | |---|---| | POA&M version | 1.2 (adds P-24 / SAR F-08 — DNS/DHCP residual flows: kiosk HTTP, UKI rollback) | diff --git a/docs/irap-sar.md b/docs/irap-sar.md index b828db7..a7c323a 100644 --- a/docs/irap-sar.md +++ b/docs/irap-sar.md @@ -1,17 +1,5 @@ # Security Assessment Report (SAR) — Diskless Fleet Boot System -> **Protective marking:** `STARFLEET RESTRICTED — CLEARANCE LEVEL 2 — BRIDGE CREW / SECURITY DIVISION` -> *(Starfleet marking scheme used throughout this document set: -> `STARFLEET ROUTINE` ≈ OFFICIAL · `STARFLEET RESTRICTED` ≈ OFFICIAL: Sensitive · -> `STARFLEET SECRET` ≈ PROTECTED · `OMEGA DIRECTIVE` ≈ SECRET and above. -> Confirm against the system's final data classification.)* -> -> **Assessment framework:** Australian Government PSPF + ASD *Information -> Security Manual* (ISM), May 2026 release (engagement target). This report is -> the IRAP assessor's Security Assessment Report produced under stage 4 -> (**Assess**) of the ISM assessment and authorisation lifecycle, for use by the -> Authorising Officer at stage 5 (**Authorise**). - | Field | Value | |---|---| | System assessed | Diskless Fleet Boot System ("the fleet") |