PW.1.3 Where appropriate, build in support for using standardized security features and services (e.g., enabling software to integrate with existing log …

Statement

Where appropriate, build in support for using standardized security features and services (e.g., enabling software to integrate with existing log management, identity management, access control, and vulnerability management systems) instead of creating proprietary implementations of security features and services. .Formerly PW.4.3

Example 1:

Maintain one or more software repositories of modules for supporting standardized security features and services.

Example 2:

Determine secure configurations for modules for supporting standardized security features and services, and make these configurations available (e.g., as configuration-as-code) so developers can readily use them.

Example 3:

Define criteria for which security features and services must be supported by software to be developed.

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

3. Relaterede reguleringer

Linkede sager

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final