RV.1.2 Review, analyze, and/or test the software’s code to identify or confirm the presence of previously undetected vulnerabilities.

Statement

Review, analyze, and/or test the software’s code to identify or confirm the presence of previously undetected vulnerabilities.

Example 1:

Configure the toolchain to perform automated code analysis and testing on a regular or continuous basis for all supported releases.

Example 2:

See PW.7 and PW.8.

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

3. Relaterede reguleringer

Linkede sager

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final