Canada ITSG-33 - IT Security Risk Management A2-3.5.1: 3.5.1 Incorporate system security controls in the high-level design

The project allocates technical, operational and management controls to high-level design elements and sets a robustness level for each control or group, supported by iterative threat and risk assessment activities built on the domain or departmental threat assessment. The TRA work considers asset sensitivity and threats, assesses control adequacy, weighs cost and benefit, adjusts the design, documents risk scenarios and reports residual risk; controls may be added, removed or rationalised (for example encrypting laptops but relying on zone protection for fixed desktops). Deviations from the recommended robustness must be justified and documented.