traceability matrix

{
  "id": "MLC-T-CYB-004371",
  "term": "traceability matrix",
  "field": "Cybersecurity",
  "definition": "1. A matrix that records the relationship between two or more products of the development process (e.g., a matrix that records the relationship between the requirements and the design of a given software component).\n\n2. A matrix that records the relationship between two or more products of the development process (e.g., a matrix that records the relationship between the requirements and the design of a given software component).\nNote 1: A traceability matrix can record the relationship between a set of requirements and one or more products of the development process and can be used to demonstrate completeness and coverage of an activity or analysis based upon the requirements contained in the matrix.\nNote 2: A traceability matrix may be conveyed as a set of matrices representing requirements at different levels of decomposition. Such a traceability matrix enables the tracing of requirements stated in their most abstract form (e.g., statement of stakeholder requirements) through decomposition steps that result in the implementation that satisfies the requirements.",
  "references": [
    "NIST SP 800-160v1r1 from ISO/IEC/IEEE 24765:2017",
    "NIST SP 800-160 Vol. 1 from IEEE 610.12",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/traceability-matrix/"
}