DEV-07.01B

Changes to the cloud service are subject to appropriate testing according to documented test procedures during software development and deployment.

Supplementary information

Tests should be used that contribute to the quality assurance of the software development as well as to the security of the cloud service.

The errors and vulnerabilities identified in tests can be assessed, for example, according to the Common Vulnerability Scoring System (CVSS).

Supplementary information

Test procedures for software assets can be static (SAST), dynamic (DAST) or interactive (IAST).

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

3. Réglementations associées

Tickets liés

• BSI -

  Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)