1.5 Assurance Classes

Certain requirements specified in this standard depend upon two aspects of an application.

The first is the accessibility, e.g. is an application accessible from the Internet, the second is the business criticality:

 

 

 

Accessibility of Application

INTERNAL
(Not Internet-facing)

EXTERNAL

(Internet-facing)

Criticality of Application

Low-Medium

Low

Standard

High

Standard

High

Very High

High

Very High

Table 1-1: Assurance Classes of Applications