Gt1y-613gd consolidation of a secure systems engineering toolset for space missions phase 1

Due to the evolving threat landscape, security is a concern at the forefront of agendas across the space industry. In response, emerging secure space system engineering standards in Europe (e.g. ECSS), guidelines internationally (e.g. CCSDS, NIST Special Publications) and the ESA Security Framework demand a robust secure system engineering approach to be applied.This task, including risk assessment, threat modelling, requirements engineering, verification and test, certification and accreditation which is complex,cost- and effort-intensive. Today, it often starts from scratch for new developments. There is a lack of interoperability, formal traceability and cohesion across the tools and data utilised by different teams and engineering domains. Compliance with applicable regulations and standards must be continuously tracked and demonstrated. Risks and risk tolerance must be aligned with the design baseline and customer and mission profiles.This leads to repeated and manual efforts to define, maintain and reconcile security and design baselines with certification, compliance and accreditation evidence throughout the lifecycle. At the same time model-based system engineering (MBSE) methods are becoming more prominent. Models may define reference architectures and reusable engineering data libraries from one mission or system development to another and facilitate digital continuity and exchange across customer-supplier boundaries, lifecycle phases and engineering domains.Building on precursory developments (e.g. GT17-065GE), this activity shall extend, configure and demonstrate a fully digital, web-based and collaborative space system security engineering toolset consisting of software, method and datasets. It shall support workflows, report generation and the definition of reusable catalogues and mission-tailored profiling of asset models, security objectives, feared events, threats, risks, requirements and controls. This shall be aligned with reference security architecture developments executed within the Agency. Top-down reconciliation of organisational level governance, to missions, to systems, and the bottom-up inputs from security testing tools such as the Space Cyber Centre of Excellence (SCCoE) and DevOps platforms shall be supported. The toolset shall be integrated with MBSE infrastructure, ensuring a seamless exchange of engineering data whilst ensuring necessary access control, segregation and need to know are respected and accounting for the need to persist and manage mission data with varying levels of security protection and classification needs.