IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Organisation Remarks
____________________________________________________________________ .........................................
- The running capabilities of the product must be checked in the planned
usage environment; this comprises in particular a check of screen editing,
printer output, mouse support, networking capability, etc.
- The completeness of the product (programs and manuals) must be checked,
e.g. by comparing with the inventory, the product specification or similar.
- Short tests of program functions should be performed which are not
explicitly mentioned in the requirements, with regard to function,
plausibility, freedom from error, etc.
Functional tests
The functional requirements which were placed on the product in the
Requirements Catalogue must be examined in terms of the following aspects:
- Existence of the function by calling up in the program and evaluation of the
items of program documentation.
- Freedom from error or correctness of the function
In order to guarantee the freedom from error or correctness of the function,
depending on the test level various test procedures should be used during
the check such as black box tests, white box tests or simulated production
running.
The test data and test cases created in the initial phase are used in the
functionality test. During the functionality test it is necessary to compare
the test results with the specified requirements. In addition, a check should
be made on how the program reacts in the case of faulty input parameters
or faulty operation. The function must also be tested with the limit values
of the intervals of input parameters and with exceptional cases. These must
be detected accordingly and correctly handled.
- Suitability of the function
The suitability of the function is distinguished by the fact that the function
- actually fulfils the task to the required extent and in an efficient
manner and
- can be integrated easily into normal work processes.
If the suitability of the function is not obvious, the solution is to test this in
a simulated production operation, but still in the test environment.
- Consistency
The consistency of the separate functions must be checked, in each case
between the Requirements Catalogue, the documentation and the program.
Any contradictions must be documented. Discrepancies between the
documentation and the program must be recorded in such a way that they
can be incorporated into the additions to the documentation when the
product is used later.
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000