Artifacts & acronyms

Canonical registry of 22 controlled terms under release FR-2026.1.

Canonical terms

controlled vocabulary

Effective

100%

under FR-2026.1

Retired aliases

search only


CBOM	Cybersecurity Bill of Materials	PSLF-03	Engineering Manager
CSP	Customer Security Package	PSLF-06	Release Manager
CVDP	Coordinated Vulnerability Disclosure Policy	PSLF-07	PSIRT Lead
EOLSP	End-of-Life Security Plan	PSLF-08	Portfolio Owner
FAR	Framework Applicability Record	PSLF-00	Regulatory Intelligence
PMP	Patch Management Plan	PSLF-07	PSIRT Lead
PSAA	Product Security Applicability Assessment	PSLF-00	Product Owner
PSAD	Product Security Architecture Description	PSLF-02	System Architect
PSCG	Product Security Configuration Guide	PSLF-03	Engineering Manager
PSIRP	Product Security Incident Response Plan	PSLF-07	PSIRT Lead
PSLF	Product Security Lifecycle Framework	Framework-wide	Framework Governance Board
PSMP	Product Security Management Plan	PSLF-01	Security Lead
PSPR	Product Security and Privacy Requirements	PSLF-02	Security Architect
PSRA	Product Security Risk Assessment	PSLF-02 onward	Security Lead
PSRMR	Product Security Risk Management Report	PSLF-06	Security Lead
PSRTM	Product Security Requirements Traceability Matrix	PSLF-02 onward	Security Lead
PSTP	Product Security Test Plan	PSLF-04	Security Reviewer
PSVALR	Product Security Validation Report	PSLF-05	Product Owner
PSVR	Product Security Verification Report	PSLF-04	Security Reviewer
SBOM	Software Bill of Materials	PSLF-03	Engineering Manager
VMP	Vulnerability Management Plan	PSLF-07	PSIRT Lead
VMR	Vulnerability Management Register	PSLF-03 onward	Security Lead

CBOM
PSLF-03
Cybersecurity Bill of Materials
Owner role
Engineering Manager
CSP
PSLF-06
Customer Security Package
Owner role
Release Manager
CVDP
PSLF-07
Coordinated Vulnerability Disclosure Policy
Owner role
PSIRT Lead
EOLSP
PSLF-08
End-of-Life Security Plan
Owner role
Portfolio Owner
FAR
PSLF-00
Framework Applicability Record
Owner role
Regulatory Intelligence
PMP
PSLF-07
Patch Management Plan
Owner role
PSIRT Lead
PSAA
PSLF-00
Product Security Applicability Assessment
Owner role
Product Owner
PSAD
PSLF-02
Product Security Architecture Description
Owner role
System Architect
PSCG
PSLF-03
Product Security Configuration Guide
Owner role
Engineering Manager
PSIRP
PSLF-07
Product Security Incident Response Plan
Owner role
PSIRT Lead
PSLF
Framework-wide
Product Security Lifecycle Framework
Owner role
Framework Governance Board
PSMP
PSLF-01
Product Security Management Plan
Owner role
Security Lead
PSPR
PSLF-02
Product Security and Privacy Requirements
Owner role
Security Architect
PSRA
PSLF-02 onward
Product Security Risk Assessment
Owner role
Security Lead
PSRMR
PSLF-06
Product Security Risk Management Report
Owner role
Security Lead
PSRTM
PSLF-02 onward
Product Security Requirements Traceability Matrix
Owner role
Security Lead
PSTP
PSLF-04
Product Security Test Plan
Owner role
Security Reviewer
PSVALR
PSLF-05
Product Security Validation Report
Owner role
Product Owner
PSVR
PSLF-04
Product Security Verification Report
Owner role
Security Reviewer
SBOM
PSLF-03
Software Bill of Materials
Owner role
Engineering Manager
VMP
PSLF-07
Vulnerability Management Plan
Owner role
PSIRT Lead
VMR
PSLF-03 onward
Vulnerability Management Register
Owner role
Security Lead

22 canonical terms

Product Security Risk Assessment

PSRA · ART-0006Effective

Registry state: Effective
Produced in: PSLF-02 onward
Owner role: Security Lead
Approver roles: Security Reviewer, Clinical Safety / Risk Authority
Purpose: Threats, risks, controls, residual risk
Migration note: Retained; title standardized

Minimum governed content

Assets, trust boundaries, threat scenarios, hazardous situations
Method version, factor values, inherent and residual scores
Treatment decisions with owners and acceptance authority