RV.1.2 Review, analyze, and/or test the software’s code to identify or confirm the presence of previously undetected vulnerabilities.

Statement

Review, analyze, and/or test the software’s code to identify or confirm the presence of previously undetected vulnerabilities.

Example 1:

Configure the toolchain to perform automated code analysis and testing on a regular or continuous basis for all supported releases.

Example 2:

See PW.7 and PW.8.

1. Преглед

1.1 Препратки

1.2 Идентифицирани изисквания

1.3 Свързани регулации

2. Идентифицирани изисквания

3. Свързани регулации

Свързани задачи

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final