Trustworthy Software Initiative (TSI)

Question 1

What is Trustworthy Software Initiative (TSI)

Answer 1

Trustworthy Software Foundation (TSFdn) is a UK organisation with stated aim of improving software

Question 2

What type of approach must you adopt to determine a software trustworthiness level

Answer 2

TSI recommends a risk based approach

Question 3

TL0

Answer 3

Software Audience
No requirement for trustworthy software

Control Set
No requirement

Question 4

TL1

Answer 4

Software Audience
Mass market with Implicit Need (M/I)

Control Set
TS Essentials (TSE)

Question 5

TL2

Answer 5

Software Audience
Mass market with Implicit Need (M/I)

Control Set
Baseline TS controls – subset of TSF

Question 6

TL3

Answer 6

Software Audience
Mass market with Explicit Need (M/E)

Control Set
TS Framework (TSF)

Question 7

TL4

Answer 7

Software Audience
Niche with Explicit Need (N/E)

Control Set
Comprehensive TS controls – full TSF

Question 8

What are the Facets Trustworthiness

Answer 8

 Safety – the ability of the system to operate without harmful states
 Reliability – the ability of the system to deliver services as specified
 Availability – the ability of the system to deliver services when
requested
 Resilience – the ability of the system to transform, renew, and recover
in timely response to events
 Security – the ability of the system to remain protected against accidental or deliberate attacks

Question 9

Trustworthy Software Essentials is used for what type of software

Answer 9

Software requiring TL1 & TL2

Question 10

SCUDA  is a subset of TSF for software in 
 Scope for Use
 Coding Practices
 Use Tools Effectively
 Defect Management
 Artefact Management

Answer 10

TL1 & TL2 Trustworthy Software Essentials

Question 11

Trustworthy Software Framework is used for what type of software

Answer 11

Used for software requiring TL3 & TL4

Organised under Governance, Risk, Controls & Compliance, Personnel, Physical, Procedural & Technical