RV.3.2 Analyze the root causes over time to identify patterns, such as a particular secure coding practice not being followed consistently.

Statement

Analyze the root causes over time to identify patterns, such as a particular secure coding practice not being followed consistently.

Example 1:

Record lessons learned through root cause analysis in a wiki that developers can access and search.

Example 2:

Add mechanisms to the toolchain to automatically detect future instances of the root cause.

Example 3:

Update manual processes to detect future instances of the root cause.

1. Resumen

1.1 Referencias

1.2 Requisitos identificados

1.3 Regulaciones relacionadas

2. Requisitos identificados

3. Regulaciones relacionadas

Incidencias vinculadas

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final