[sacm] Question about DM Requirements

["Haynes, Dan" <[e-mail]>]

I was reviewing the DM requirements based on the SWID M&A call for adoption thread and had some questions.


In Section 2 of the Requirements, it says:


                    "Multiple data models, protocols, and transports may be employed in a SACM environment..."



Then DM-001 says:



"DM-001  Element Association: The data model MUST contain a data model element for each information model element (e.g. endpoint, IP address, asset).  In other words, for every item in the information model, there must be an item in the data model.  The data model can also include elements that do not exist in the information model."



Does this requirement conflict with the text above in Section 2 by saying that every DM must contain an element for each IM element?  That is, each DM must support the entire IM and it is not possible for a DM to just support a portion of the IM.



Also, DM-002 says:


"DM-002  Data Model Structure: The data model can be structured either as one single module or separated into modules and sub-modules that allow for references between them.  The data model structure MAY reflect structure in the information model, but does not need to. For example, the data model might use one module to define endpoints, and that module might reference other modules that describe the various assets associated with the endpoint. Constraints and interfaces might further be defined to resolve or tolerate ambiguity in the references (e.g. same IP address used in two separate networks)."



Is this effectively reiterating that a DM must support everything in the IM, but, that the DM can choose to break it up into submodules if they so choose?



Thanks,

Danny