3. TOM QUESTIONS
3.1 Company Details
SECTION 2: CONTACT INFORMATION
Please provide main contact details
Please provide Finance contact details
If you have additional directors, please advise by email, to firstname.lastname@example.org
TRUSTWORTHY SOFTWARE MANAGEMENT SYSTEM (TSMS)
Supplementary guidance: There is a list of topics to be covered in section 3.1 of [AD.3]. If you have a management system that only covers some of them, answer “In Part”.
Expected self-testing: Check your management documentation and processes against section 3.1 of [AD.3].
Supplementary guidance: If it is not part of a wider system, leave this answer blank.
Answer: Insert here the name of the management or certification system fulfilling your TSMS requirements.
3.3 ROLES AND RESPONSIBILITIES
TRUSTWORTHY SOFTWARE RELEASE AUTHORITY (TSRA)
Supplementary guidance: Elsewhere in this questionnaire this person or group is referred to as the Trustworthy Software Release Authority (TSRA), but you may have given it a more understandable name, or it may be part of a wider job function.
To answer “Yes”, your TSRA must be empowered by your Board or equivalent with sufficient authority to fulfil its functions.
Expected self-testing: Identify the relevant person or group.
Supplementary guidance: If you have none, leave this answer blank.
Answer: Insert the name of the person or group fulfilling your TSRA role.
Supplementary guidance: The relevant activities are listed in section 3.2 of [AD.3]. If any are not performed by your TSRA, or you don’t have a TSRA, answer “No”.
Expected self-testing: Compare the activities of your TSRA against the activities listed in [AD.3].
By submitting this form I am consenting to the sharing of information between Trustworthy Software Foundation, CUPAS, ADISA and the UK Ministry of Defence.
I can confirm that information submitted is accurate to the best of my knowledge.
Please upload your signed Attestation:
Please upload a copy of the relevant certificate for the scheme you are registering:
This form uses Akismet to reduce spam. Learn how your data is processed.