Details
Description
The HCS is a bag of security vocabulary. This has been somewhat explained on security-labels, however there is confusion that would be helped by specific guidance. Such as
Some of the vocabulary are used in three different ways. To tag data, transactions, and requests.
Bundle – would carry the 'high water" marking (confidentiality, sensitivity, integrity), compartment/purposeOfUse constraints, and Obligations.
All other resources are more likely to only be tagged with confidentiality, sensitivity, and integrity; and would be unlikely (discourage) to have compartment, purposeOfUse, or Obligations.
Requests (e.g. Read, Query, message triggers) - would leverage purposeOfUse and compartment. It is unlikely to see in a request a declaration of confidentiality, sensitivity, or integrity. It is also unlikely to see Obligations within a Request. (See Bundle for Response, where these are appropriate)