Implementation Principle
Integrity is not implemented through policy.It is implemented through system structure.
1. Traceability
The system MUST ensure:
- all actions are recorded
- actions are time-linked
- actions are attributable
- system behavior is reconstructable
2. Structural Consistency
The system MUST ensure:
- rules remain consistent
- all changes are recorded
- deviations are detectable
3. Verification Capability
The system MUST allow:
- independent verification
- auditability
- validation of system behavior
4. Manipulation Detection
The system MUST detect:
- unauthorized changes
- data manipulation
- process bypass
5. Integrity State Transparency
The system MUST define:
- valid state
- compromised state
- restored state
6. Chain of Control
The system MUST define:
- responsible entities
- authority structure
- control transitions
Operational Condition
All conditions MUST:
- operate continuously
- exist in real time
- be verifiable at any moment
Non-Compliance
The system is NOT compliant if:
- actions are not traceable
- manipulation cannot be detected
- behavior cannot be verified