Sort twenty requirements into the four document types

short · 35 min · Objective 1.1

Task

Apply the three signals -- mandatory or not, names a technology or not, a sequence or not -- to twenty real requirement statements, and find the ones currently written in the wrong document.

Steps

  1. Extract twenty requirement sentences into lab/doc-sort.csv with header id,sentence,mandatory,names_technology,is_sequence,verdict.
  2. Fill mandatory from the modal verb, names_technology from whether a version, algorithm, product or threshold appears, and is_sequence from whether ordered steps are described.
  3. Derive verdict mechanically: not mandatory -> guideline; sequence -> procedure; names technology -> standard; otherwise policy. Do not override the derivation with judgement yet.
  4. Add a column current recording which document each sentence is actually in today, and mark the rows where current and verdict disagree.
  5. For each disagreement, write one line in lab/doc-sort-notes.md saying what it costs -- usually that a technical value now requires board-level change control.

Verify

awk -F, 'NR>1 && NF>=7 {n++} END {print n" sentence(s) classified"}' lab/doc-sort.csv
awk -F, 'NR>1 {print $6}' lab/doc-sort.csv | sort | uniq -c
awk -F, 'NR>1 && $6!=$7 {n++} END {print n" misplaced"}' lab/doc-sort.csv
grep -c . lab/doc-sort-notes.md

Twenty rows, all four verdict values present, and at least one misplacement with a note. A set with zero misplacements means the set was too small or the derivation was overridden.

This is an independent study companion for CompTIA SecurityX CAS-005 and is not produced by or endorsed by CompTIA.