thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Intermediate

Requirements Traceability Matrix (RTM)

A table that maps each requirement to its design elements and test cases to show it is implemented and verified.

Definition

In secure development, the RTM links security requirements to the controls that implement them and the tests that verify them, which exposes gaps and supports audits. It also helps assess the impact of changing a requirement.

Example

An RTM row maps 'enforce MFA for administrators' to the login service design and test case TC-114.

Exam tip

In CSSLP questions, the RTM is the tool for proving every security requirement was tested.

Related terms