For detail regarding the practice of Requirements Management,

please refer to the Requirements Management Practices Guide

Instructions For Completing This Document

1.)
2.)

Complete the Project Name, Project Manager Name, and Project

Description fields
For each issue identified, complete the following:
ID: A unique ID number used to identify the traceability item in the
requirements traceability matrix.
Associated ID(s): This column should contain the ID of any
associated utilities used for requirements tracking such as a
repository, pipeline document, etc.
Technical Assumption(s) or Customer Need(s): This column
should be populated with a description of the technical assumption
or customer need linked to the functional requirement.
Functional Requirement: This column should be populated with a
description of the functional requirement.
Status: This column should be populated with the current status of
the functional requirement.
Architectural/Design Document: This column should be
populated with a description of the architectural/design document
linked to the functional requirement.
Technical Specification: This column should be populated with a
description of the technical specification linked to the functional
requirement.
System Component(s): This column should be populated with a
description of the system component(s) linked to the functional
requirement.
Software Module(s): This column should be populated with a
description of the software module(s) linked to the functional
requirement.
Test Case Number: This column should be populated with the test
case number linked to the functional requirement.
Tested In: This column should be populated with the module that
the functional requirement has been tested in.
Implemented In: This column should be populated with the module
that the functional requirement has been implemented in.
Verification: This column should be populated with a description of
the verification document linked to the functional requirement.
Additional Comments: This column should be populated with any
additional comments

REQUIREMENTS TRACEABILITY MATRIX

Project Name:

Office 365 Security v1.0

Project Manager Name: Richard Huang USPDG x6495

Project Description:
ID

Assoc
ID

001

1.0.0

Build a security email (Exchange) proxy to enable customers to benefit the flexibility, scalability of cloud-based messaging service (Office 365) while filtering malicious content and protecting of it
on the Exchange server in the cloud.
Technical Assumption(s)
and/or Customer Need(s)

Functional
Requirement

Priority

Status

v1.0
release

Dev Owner

Proxies to Office 365 cloud

Provide decryption and searching service for mail
clients using EAS on mobile devices via the proxy;

1.1.0

1.2.0

Standard OWA (Outlook Web Access)

Proxy

1.2.1

1.2.2

1.3.0

1.4.0

Support Apple iOS 6, Android 2.3.7 Gingerbread, 4.0.x Ice Cream

Sandwitch, 4.1.x, 4.2.x Jellybean
Critical

In Progress

yes

Yusong

In Progress

yes

Jeremy, JB

Provide decryption and searching service for mail

clients using OWA from desktop browsers pointing to
OWA server via the proxy; Support latest Chrome, Firefox,
IE 9 (?) 10 - High, Safari Mac- Medium

Critical

OWA - Mobile Proxy

browser clients accessing OWA server via mobile devices will get
WAP-like content

Deferred

no

OWA - Lite Proxy

Not an option in O365; Only available on on-premise Exchange

server; Opera browsers will automatically pick up OWA Lite version
but standard

Deferred

no

MAPI Proxy

EWS (Exchange Web Service) Proxy

Provide decryption and searching service for native

Outlook clients on Windows desktop via the proxy;
Support Windows Outlook 2007+

Medium

In Progress

maybe

Don

Low

Not Started

maybe

TBD

Provide decryption and searching service for native

Outlook clients on Mac desktop via the proxy; Support
Mac Outlook 2011+

Provide decryption and searching service for various

IMAP mail cients like Outlook Express, Apple iMail,
Thunderbird, etc
Provide decryption server for POP3 mail clients

1.6.0

IMAP Proxy
POP3 Proxy

2.0.0

Email Delegation Services

(back-end)

2.1.0

Mailbox Notification Server (streamming)

To monitor registered mailboxes/folders and receive

notification when there's new email arriving

Critical

In Progress

yes

Yusong

Mailbox Discovery Monitor

To discover existing mailboxes under the same domain

when starting the service; It will also monitor changes
on account creation, update, and deletion

Critical

Not Started

yes

Yusong

1.5.0

002

EAS (Exchange Active Sync) Proxy

2.2.0

UP Template Version: 11/30/06

Deferred

no

Deferred

no

Page 2 of 16

REQUIREMENTS TRACEABILITY MATRIX

Project Name:

Office 365 Security v1.0

Project Manager Name: Richard Huang USPDG x6495

Project Description:
ID

Assoc
ID

2.4.0

3.0.0

Crypto Services (back-end)

Functional
Requirement

To retrieve and update new emails upon arrival after

applying various content processing web services
(index, crypto, malware scanning); Support processing
standard MIME content with multiple attachment
May not be an 1.0 item but will likely be asked by
customers as competitors cover these

Priority

Critical

Status

In Progress

Medium

v1.0
release

Dev Owner

yes

Yusong

no

Yusong,
Liang-seng

Crypto Web Services

Provide both set of stateless and stateful (for MAPI)

encryption/decryption web service API for content
processing agent to call; Support AES256/CBC on
content encryption; Use one key (user-defined) per
email domain;

Critical

In Progress

yes

Bharath

3.2.0

Key Management Services

Provide secured key management services to Crypto

Services leverging existing Trend key management
service (SecureCloud)

High

Not Started

yes

Bharath

4.0.0

Search and Index Services

(back-end)

Search and Index Engine

To provide a secure, scalable, reliable, and highperformance email content index and search engine
with equivalent capabilities to Office365's
search/sorting features; Schema of Index engine is
catered to query email messages with multiple
attachments; Support one index file for a domain
(company) for data privacy

Critical

In Progress

yes

Ray

Searching and Sorting Web Services

Provide a set of stateless web services supporting

Microsoft Advanced Query Search (AQS) syntax for
searching and sorting requirement

Critical

In Progress

yes

Liang-seng

3.1.0

004

Technical Assumption(s)
and/or Customer Need(s)

Email Processing Agent

Contact and Calendar Entities Encryption
Research

2.3.0

003

Build a security email (Exchange) proxy to enable customers to benefit the flexibility, scalability of cloud-based messaging service (Office 365) while filtering malicious content and protecting of it
on the Exchange server in the cloud.

4.1.0

4.2.0

UP Template Version: 11/30/06

Page 3 of 16

REQUIREMENTS TRACEABILITY MATRIX

Project Name:

Office 365 Security v1.0

Project Manager Name: Richard Huang USPDG x6495

Project Description:
ID

005

006

Build a security email (Exchange) proxy to enable customers to benefit the flexibility, scalability of cloud-based messaging service (Office 365) while filtering malicious content and protecting of it
on the Exchange server in the cloud.

Assoc
ID

5.0.0

Technical Assumption(s)
and/or Customer Need(s)

Functional
Requirement

Priority

Status

v1.0
release

Dev Owner

Content Scanning Services

(back-end)

5.1.0

Malware Scanning Web Services

5.2.0

Spam Detection Web Services

Provide a set of stateless Malware Scanning web

services to detect and clean malicious content in an
email message
Provide a set of stateless Spam Detection web
services to identify and block spam messages

5.3.0

DLP Web Services

6.0.0

GUI Console

6.1.0

Signup and Deployment

6.1.1

New account creation process for trial

6.2.0

License Management

6.2.1

Deferred

no

Deferred

no

Provide a set of stateless Data Leakage Prevention

web services to filter sensitive content in an email
message defined by customers

Deferred

no

To be designed by HIE

High

Not Started

yes

Tim; Parvez;
TBD

Initial scanning and encryption for all (or selected)

mailboxes for new account (backend)

Depending on 2.2.0 Auto Discovery Monitor capability; allow

customization of encryption on individual accounts or all

High

Not Started

yes

TBD

6.2.2

License Expiration Monitoring and Enforcing

Allow 30d for trial; Stop encryption with another 30d grace period to
tear down; Send notifications to admin/users to take action; user
can't connect to proxies to read email aftrer grace period but admin
can logon to console to decrypt emails (backend)

High

Not Started

yes

TBD

6.2.3

Signoff decryption for all (or selected) mailboxes

Depending on 2.2.0 Auto Discovery Monitor capability; allow

customization of encryption on individual accounts or all

High

Not Started

yes

TBD

6.3.0

Dashboard

6.4.0

Policy Management
Key Management

6.5.0

6.6.0
6.7.0

Log/Event query and Reporting

Admin User Management

UP Template Version: 11/30/06

Provide critical security and encryption metrics for

monitoring; To be designed by HIE - something basic
is enough; don't need to be full blown
Some basic policy is enough - To be designed by HIE do a competitor analysis first
To be designed by HIE
provide audit log only in v1.0;To be designed by
HIE/PM
To be designed by HIE

Medium
High

maybe
Not Started

Deferred
Medium
Medium

maybe

TBD

no
Not Started

yes

TBD

maybe
Page 4 of 16

REQUIREMENTS TRACEABILITY MATRIX

Project Name:

Office 365 Security v1.0

Project Manager Name: Richard Huang USPDG x6495

Project Description:
ID

Assoc
ID
6.8.0

007

7.0.0

Technical Assumption(s)
and/or Customer Need(s)

Administration
Online Help
Marketing/sale page

7.3.0

8.0.0

Performance Tuning

7.2.0

Functional
Requirement

To be designed by HIE - do a competitor analysis first

Priority

Status

Medium

v1.0
release

Dev Owner

maybe
yes

Mike Sanko

SaaS Operation (nonfunctional)

Build and RPM Packages
Monitoring Scripts

7.1.0

008

Build a security email (Exchange) proxy to enable customers to benefit the flexibility, scalability of cloud-based messaging service (Office 365) while filtering malicious content and protecting of it
on the Exchange server in the cloud.

Build RPM packages for all software components for

ease of deployment on AWS
To be scoped out
To be scoped out with Patrick Lu
For everyone to design and fine tuning component
performance

High

In Progress

yes

Russell and
others;
Liang-seng
dialy build

Medium

Not Started

yes

TBD
Everyone

High

Not Started

yes

Everyone

009
010
011
012
013
014
015
016
017
018
019
020
021
022
023
024
025
026
027
028

UP Template Version: 11/30/06

Page 5 of 16

REQUIREMENTS TRACEABILITY MATRIX

Project Name:

Office 365 Security v1.0

Project Manager Name: Richard Huang USPDG x6495

Project Description:
ID

Assoc
ID

Build a security email (Exchange) proxy to enable customers to benefit the flexibility, scalability of cloud-based messaging service (Office 365) while filtering malicious content and protecting of it
on the Exchange server in the cloud.
Technical Assumption(s)
and/or Customer Need(s)

Functional
Requirement

Priority

Status

v1.0
release

Dev Owner

029
030
031
032
033
034

UP Template Version: 11/30/06

Page 6 of 16

REQUIREMENTS TRACEABILITY MATRIX

nd protecting of its data (encryption) residing

QA Owner

Architectural/Design
Document

Project Name:

Office 365 Security v0.1

Project Manager Name:

Richard Huang

Project Description:

<required>

Software
Module(s)

Test Case
Number

Tested In

Implemented In

Verification

EAS proxy
server in node.js

OWA proxy
server in node.js

Open source
OpenChange in
C/C++

TBD

EWS/Java

EWS/Java
UP Template Version: 11/30/06

Page 7 of 16

REQUIREMENTS TRACEABILITY MATRIX

nd protecting of its data (encryption) residing

QA Owner

Architectural/Design
Document

Project Name:

Office 365 Security v0.1

Project Manager Name:

Richard Huang

Project Description:

<required>

Software
Module(s)

Test Case
Number

Tested In

Implemented In

Verification

EWS/Java/Tika

Open SSL
Node.js
Integrated with
Secure Cloud
Key
Management
Service

Open source
Solr/Lucene

Java/REST

UP Template Version: 11/30/06

Page 8 of 16

REQUIREMENTS TRACEABILITY MATRIX

nd protecting of its data (encryption) residing

QA Owner

Architectural/Design
Document

UP Template Version: 11/30/06

Project Name:

Office 365 Security v0.1

Project Manager Name:

Richard Huang

Project Description:

<required>

Software
Module(s)

Test Case
Number

Tested In

Implemented In

Verification

Page 9 of 16

REQUIREMENTS TRACEABILITY MATRIX

nd protecting of its data (encryption) residing

QA Owner

Architectural/Design
Document

UP Template Version: 11/30/06

Project Name:

Office 365 Security v0.1

Project Manager Name:

Richard Huang

Project Description:

<required>

Software
Module(s)

Test Case
Number

Tested In

Implemented In

Verification

Page 10 of 16

REQUIREMENTS TRACEABILITY MATRIX

nd protecting of its data (encryption) residing

QA Owner

Architectural/Design
Document

UP Template Version: 11/30/06

Project Name:

Office 365 Security v0.1

Project Manager Name:

Richard Huang

Project Description:

<required>

Software
Module(s)

Test Case
Number

Tested In

Implemented In

Verification

Page 11 of 16

Additional
Comments

Defered assuming users will use EAC clients or other mail apps to read emails other than common browsers

Defered because O365 does not provide option to use to go with OWA lite version

Defered assuming O365 users are less likely to use IMAP clients to retrieve emails
Defered assuming O365 users are less likely to use POP3 clients to retrieve emails

UP Template Version: 11/30/06

Page 12 of 16

Additional
Comments

UP Template Version: 11/30/06

Page 13 of 16

Additional
Comments

UP Template Version: 11/30/06

Page 14 of 16

Additional
Comments

UP Template Version: 11/30/06

Page 15 of 16

Additional
Comments

UP Template Version: 11/30/06

Page 16 of 16