SRTM- Security Requirements Traceability Matrix

This Security Requirements Traceability Matrix (SRTM) workbook is to be used to document the test results from a 3PAO assessment.

Definition:

SRTM is a Matrix that captures all security requirements linked to potential risks and addresses all applicable C&A requirements. It is, therefore, a correlation statement of a system’s security features and compliance methods for each security requirement.
SOURCE: CNSSI-4009

Used In A Sentence:

Where the hell did Jennifer just go? She has my only copy of the current SRTM that we need to give to TEKRiSQ!

NIST 800-53, also known as the security controls traceability matrix (SCTM), it is a document that the federal government utilizes to ensure compliance of new systems that are becoming active and going an accreditation process.

See Also: discussions of SRTM in link to CISA CRR Resource Guide