SHEET 04ASSURANCE · VALIDATION · ISO/SAE 21434 §9–§11

"Verified" means
a passing test exists.

Risk → goal → requirement → control → claim → test, as typed graph edges. A claim holds only while its evidence holds — break any link and everything upstream demotes itself. No status field anyone can hand-edit to green.

See a chain end-to-end SecOC · UDS fuzzing · CANoe · 40+ protocol packs
Claim status — computed
CLM-07 SecOC on powertrain bus ● VERIFIED
└ TC-231 passed · bench campaign #12
CLM-09 UDS session hardening ● RE-VERIFY
└ REQ-118 changed upstream → demoted
CLM-12 Cellular uplink TLS ● FAILED
└ TC-244 failed → R-021 re-opened
STATION 1 · GOALS & REQUIREMENTS

Every risk decision
spawns its chain.

A treatment decision on Sheet 02 creates security goals; goals decompose into requirements. Both stay wired to the risk that caused them — nothing floats free in a requirements tool.

INPUT ← risk R-* · treatment decision
EMITS → goals SG-* · requirements REQ-*
TRACE → §9 work products
SECURITY ASSURANCE CANVAS · R-014 — CAN FRAME INJECTION RISK → GOAL → REQ → CONTROL → CLAIM → TEST
R-014 · Critical RISK
SG-03 SECURITY GOAL
REQ-112 REQUIREMENT
REQ-118 REQUIREMENT
CTL-27 · SecOC CONTROL
CLM-07 · Verified CLAIM
TC-231 · Passed TEST CASE

BREAK ANY LINK → EVERY CLAIM UPSTREAM RE-FLAGS. AUTOMATICALLY.

SecOC · filtering · hardening ← IMPLEMENTED
claims computed, not declared ← STATUS
weakness trees · CWE ← ANALYSIS
STATION 2 · CONTROLS & CLAIMS

A claim is only as good
as its newest evidence.

Controls implement requirements; claims assert they work. Status is derived from the chain — change a requirement upstream and the claim demotes until re-verified.

STATION 3 · TEST ON THE BENCH

Campaigns generated
from attack paths.

Pick an attack path from the TARA — TestBench Agent builds the lab campaign: UDS recon, protocol fuzzing, CANoe execution. Results attach to claims as verification evidence; failures re-open the risks upstream.

INPUT ← attack path AP-*
RUNS → CAN/CAN-FD · UDS · SOME/IP · DoIP · +36
EMITS → pass/fail → claim status
TITLESECURITY ASSURANCE — CHAIN & VERIFICATION
STANDARDISO/SAE 21434 §9–§11
BENCHTESTBENCH AGENT · CANoe
PROTOCOLS40+ PACKS