The system should be designed, implemented, and operated in accordance with the requirements of any applicable regulations.
These may be general (such as safety regulations) or industry-specific (such as banking regulations).
namespace
SABSA
stereotype
LegalAttribute
softMetric
Independent audit and review against Security Architecture Capability Maturity Model.
hardMetric
Verification of the inventory of applicable laws to check for completeness and suitability.