Project Attributes
The Attributes tab provides a consolidated view of the attributes associated with a project. It serves as the source of truth for project information collected from supported input sources.
SD Elements maintains a library of attributes. Each project uses a subset of these attributes based on the technologies, features, and characteristics that apply to the project.
Project attributes can be populated through the project survey, the Devici-SDE integration or manual additions. These attributes determine which security requirements are relevant to the project.
View project attributes
To view the attributes associated with a project:
-
Navigate to the project.
-
Select the Attributes tab.
All users with permission to view a project can view the attributes page.
The Project Attributes page displays the following information for each attribute:
-
Attribute Name: The name of the attribute.
-
Source: The source from which the attribute was added to the project.
-
Why is this Attribute Included: Explains why the attribute is included in the project, such as being added manually, selected through the Project Survey or introduced through the Devici-SDE integration.
Manage project attributes
To add or remove manually added attributes, users must have the Edit project attributes permission.
This permission is configured under Project Roles > Project Management > Edit project attributes.
Add attributes to a project
You can add attributes from the SD Elements attribute library to a project.
-
Open the project’s Attributes tab.
-
Click + Attribute.
-
On the attribute selection page, search for and select the attributes you want to add. All attributes in the library are available to select.
-
Click Next to review the implied attributes. These are additional attributes implied by the attributes selected in the previous step.
-
Click Add to Project to add the selected attributes and their implied attributes to the project.
After the attributes are added, SD Elements recalculates the project’s relevant security requirements and Countermeasures.
Important: If the project has pending changes, those changes will also be applied when recalculation occurs. Review any pending changes before adding attributes and proceeding with recalculation.
Remove project attributes
You can remove attributes that were added manually, provided you have the Edit project attributes permission.
Attributes populated through the Project Survey or the Devici-SDE integration cannot be removed directly from the Project Attributes tab. To change these attributes, update the information at its source.
For example, if an attribute was introduced through the Project Survey, update the relevant survey information. If it was introduced through the Devici-SDE integration, update the information in the originating workflow.
Impact of attribute changes
Project attributes inform the security requirements and Countermeasures that SD Elements identifies as relevant to a project. Adding attributes and recalculating the project may change the relevant Countermeasures.
Ensure that the attributes associated with the project accurately reflect its scope and technical characteristics.