Skip to main content
tiCrypt 2.18.1

Security Requirements

Prerequisites

User Role:

Sub-admin, Admin

Permission Requirements

  • Projects
    • View projects they are a member of
    • View the members of projects they are a member of
    • View all security requirements
    • View their own certifications
  • Project Management
    • Edit projects they manage
    • Add users to projects they manage
    • Edit memberships, such as expiration dates, in projects they manage
    • Remove users from projects they manage
    • View all users' certifications
    • Certify users for security requirements
    • Edit users' certifications, such as expiration dates
    • Remove users' certifications
  • Project Administration
    • View all projects
    • Tag anything with any project
    • Create security requirements
    • Edit security requirements
    • Delete security requirements
    • Edit any project
    • View the members of every project
    • Add users to any project
    • Edit memberships in any project
    • Remove users from any project

Access Security Requirements​

  1. Go to the Management icon in the top left taskbar.
  2. Navigate to the Projects section.
  3. Click the Security Requirements in the left panel.

The table requires the View all security requirements permission. It shows the Requirement, Created, Last Modified, and Type columns, plus Levels with View all security levels and Certifications with View all users' certifications. The Type of every requirement is UserCert.

View Project Security Requirements​

Method one:​

  1. Go to the Management icon in the top left taskbar.
  2. Navigate to the Projects section.
  3. Click the Security Requirements in the left panel.
  4. Select the security requirement you want to view.
  5. Click the View button in the top right panel.
  6. In the left panel, view the security requirement name, description, creation and last modified dates, expiration, lifespan, used security levels, and active and expired certifications.

Method two:​

  1. Go to the Management icon in the top left taskbar.
  2. Navigate to the Projects section.
  3. Click the Projects in the left panel.
  4. Under the column Name, enter the project whose security requirements you want to view.
  5. Select the project.
  6. Click the Open Overlay button in the top right panel.
  7. In the new window, under the Properties section, click the Security Requirements card in the left panel.
  8. View the security requirement names, created and last-modified dates, type, security levels, and certifications.
  9. Once done, click Close in the top left panel.

Create a New Security Requirement​

  1. Go to the Management icon in the top left taskbar.
  2. Navigate to the Projects section.
  3. Click the Security Requirements in the left panel.
  4. Click the Create new security requirement button in the top right panel.
  5. In the Create new security requirement dialog, fill in the fields described in the table below.
  6. Click Create.

The following table describes the fields of the Create new security requirement and Update <requirement> dialogs.

FieldDescription
NameRequired. Up to 80 characters, without / \ | " : * ? < > { }, and different from the other requirement names.
Certification expirationRequired. Certificates must be given an expiration date. or Certificates do not need to expire.
Default Certification LifespanThe expiration offered by default when someone certifies a user, as a whole number of days, weeks, months, or years, at least one day. It must not be larger than the maximum lifespan ("Must not be larger than the maximum lifespan").
Max Certification LifespanThe longest expiration a certification can have, as a whole number of days, weeks, months, or years, at least one day.
DescriptionOptional. Up to 250 characters, without <, >, { or }. Markdown is supported.

Certify User(s) for a Security Requirement​

bulk-action

Method one:​

  1. Go to the Management icon in the top left taskbar.
  2. Navigate to the Projects section.
  3. Click the Security Requirements in the left panel.
  4. Select one security requirement. Certify user(s) and Edit appear only when exactly one requirement is selected.
  5. Click the Certify user(s) button in the top right panel.
  6. In the Certify user(s) for <requirement> dialog, select the user(s) to certify and set the expiration date. With several users selected, choose whether to Update or Skip users who already hold the certification. For a description of the fields, see User Certifications.
  7. Click Certify.

Method two:​

  1. Go to the Management icon in the top left taskbar.
  2. Navigate to the Projects section.
  3. Click the Projects in the left panel.
  4. Under the column Name, enter the project whose user(s) you want to certify with security requirements.
  5. Select the project.
  6. Click the Open Overlay button in the top right panel.
  7. In the new window, under the Properties section, click the Security Requirements card in the left panel.
  8. Select the security requirement for which you want to certify user(s).
  9. Click the Certify user(s) button in the top right panel.
  10. In the Certify user(s) for <requirement> dialog, select the user(s) to certify and set the expiration date. With several users selected, choose whether to Update or Skip users who already hold the certification.
  11. Once done, click Certify.

View Active Certifications for a Security Requirement​

  1. Go to the Management icon in the top left taskbar.
  2. Navigate to the Projects section.
  3. Click the User Certifications in the left panel.
  4. Search for the requirement name under the Requirement column.
  5. View active certifications that display future dates under the Expires column.

View Expired Certifications for a Security Requirement​

  1. Go to the Management icon in the top left taskbar.
  2. Navigate to the Projects section.
  3. Click the User Certifications in the left panel.
  4. Search for the requirement name under the Requirement column.
  5. View expired certifications that display past dates under the Expires column.
note

Expired dates are marked in red.

Edit a Security Requirement​

Method one:​

  1. Go to the Management icon in the top left taskbar.
  2. Navigate to the Projects section.
  3. Click the Security Requirements in the left panel.
  4. Select the security requirement you want to edit.
  5. Click the Edit button in the top right panel.
  6. In the Update <requirement> dialog, edit the name, expiration requirement, lifespan, and the optional description.
  7. Click Update.

Method two:​

  1. Go to the Management icon in the top left taskbar.
  2. Navigate to the Projects section.
  3. Click the Projects in the left panel.
  4. Under the column Name, enter the project with the corresponding security requirements.
  5. Select the project.
  6. Click the Open Overlay button in the top right panel.
  7. In the new window, under the Properties section, click the Security Requirements card in the left panel.
  8. Select the security requirement you want to edit.
  9. Click the Edit button in the top right panel.
  10. In the pop-up, edit the name, expiration requirement, lifespan, and the optional description.
  11. Click Update.

Delete Security Requirement(s)​

bulk-action

Method one:​

  1. Go to the Management icon in the top left taskbar.
  2. Navigate to the Projects section.
  3. Click the Security Requirements in the left panel.
  4. Select the security requirement(s) you want to delete.
  5. Click the Delete button in the top right panel.
  6. In the Delete <requirement>? dialog (or Delete N security requirements?), click Delete <requirement> (or Delete N security requirements).

The dialog explains: "Deleting a security requirement is permanent, but it is simple metadata that can be reproduced." If you lack the Create security requirements permission, it also warns that you will not be able to undo the action.

caution

You cannot delete a security requirement if it is associated with a security level or has certified users. tiCrypt skips such requirements and shows Cannot delete requirement <name> because it is used by N security levels. or Cannot delete requirement <name> because it has N certifications.

Remove a requirement from a project's security level​

A project's requirements come from its security level, and every requirement shown in the project overlay belongs to that level, so deleting it from the overlay always fails. To stop requiring a certification for a project, remove the requirement from the project's security level instead:

  1. Go to the Management icon in the top left taskbar.
  2. Navigate to the Projects section.
  3. Click the Projects in the left panel.
  4. Select the project.
  5. Click the Open Overlay button in the top right panel.
  6. In the new window, under the Properties section, click the Security Requirements card in the left panel.
  7. Click the Edit security level button in the top right panel. It requires the Edit security levels permission.
  8. In the pop-up, remove the requirement from Requirements.
  9. Click Update.
note

Editing the security level changes the requirements of every project that uses that level.