+CON.8.A14 Training Development Teams on Information Security (S)

CON.8.A14 Training Development Teams on Information Security (S)

Developers and other members of a development team SHOULD be trained on general information security aspects and the aspects specifically relevant to them, including:

  • Requirements analysis
  • Project management in general, as well as with regard to software development in particular
  • Risk management and threat modelling in software development
  • Quality management and quality assurance
  • Models and methods of software development
  • Software architecture
  • Software testing
  • Change management
  • Information security, the security policies of the organisation in question, and security aspects in special areas

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.20 Information or Products from an Unreliable Source
blocks G 0.25 Failure of Devices or Systems
blocks G 0.32 Misuse of Authorisation