RV.3.2 Analyze the root causes over time to identify patterns, such as a particular secure coding practice not being followed consistently.

Statement

Analyze the root causes over time to identify patterns, such as a particular secure coding practice not being followed consistently.

Example 1:

Record lessons learned through root cause analysis in a wiki that developers can access and search.

Example 2:

Add mechanisms to the toolchain to automatically detect future instances of the root cause.

Example 3:

Update manual processes to detect future instances of the root cause.

1. Áttekintés

1.1 Hivatkozások

1.2 Azonosított követelmények

1.3 Kapcsolódó szabályozások

2. Azonosított követelmények

3. Kapcsolódó szabályozások

Kapcsolt feladatok

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final