Assurance Claim

From GM-RKB
Jump to navigation Jump to search

An Assurance Claim is an assertion claim about a property of a system that is stated within an assurance case.

  • AKA: Assurance Case Claim.
  • Context:
    • It can (typically) be a top-level claim, which the assurance case seeks to show is satisfied, or a subclaim, into which a higher-level claim decomposes.
    • It can (typically) concern an emergent property of the system, such as safety, security, resilience, reliability or survivability.
    • It can (often) be supported by an Assurance Argument that links it to Assurance Evidence Items and to explicit assumptions.
    • It can be stated as an assumption, declared axiomatic, marked as needing support, or recorded as defeated by counter-evidence, and it remains the same claim whatever that status.
    • It can turn out to be supported, not supported, or without sufficient basis either way: whether it is true, and whether its evidence is sufficient, are assessed separately from its being a claim.
    • ...
    • It can range from being a Top-Level Assurance Claim to being an Assurance Subclaim, depending on its place in the claim decomposition.
    • It can range from being a Security Assurance Claim to being a Safety Assurance Claim, depending on the property it addresses.
    • ...
  • Example(s):
    • a Security Assurance Claim, such as the top-level claim that a system adequately contributes to freedom from the conditions that cause asset loss and the associated consequences.
    • a subclaim that a system's security policy is enforced as specified.
    • ...
  • Counter-Example(s):
    • a Subjective Assertion Claim, such as a stated preference for one café over another, which is not about a property of a system and is not stated within an assurance case.
    • an Assurance Evidence Item, which bears on a claim but is not itself a claim.
    • an Assurance Argument, which links evidence and claims rather than asserting a property.
    • ...
  • See: Assertion Claim, Assurance Argument, Assurance Evidence Item.

References

2022

  • Ross, R., Winstead, M. & McEvilley, M. (2022). Engineering Trustworthy Secure Systems, NIST Special Publication 800-160 Volume 1, Revision 1. Retrieved 2026-10-15. Supports the definition, the property scope and the claim decomposition: an assurance case is "a reasoned, auditable artifact that is created to support the contention that a top-level claim is satisfied" and contains "One or more claims about properties"; assurance cases are "used to demonstrate that a system exhibits some complex emergent property, such as safety, security, resilience, reliability, or survivability"; "Top-level claims decompose in a structured manner into subclaims"; from a security perspective, a top-level claim is that "the system will adequately contribute to freedom from the conditions that cause asset loss and the associated consequences"; and evidence "can support a conclusion that a stated claim is not achieved or that there is an insufficient basis to conclude that the claim is supported or not supported".
  • Object Management Group. (2022). Structured Assurance Case Metamodel (SACM), Version 2.2. Retrieved 2026-10-15. Supports the claim statuses: "Claims are used to record the propositions of any structured argument"; a claim "intentionally declared without any supporting evidence or argumentation can be declared as being assumed"; a claim can be declared "axiomatic", "needsSupport" or "defeated" ("defeated by counter evidence or counter argument").