+Procurement, Development and Modification of Information Systems (DEV)
---+DEV-01 Policies for the Development/Procurement of System Components
------+DEV-01.01B
------+DEV-01.02B
------+DEV-01.03B
------+DEV-01.01AC
---+DEV-02 Outsourcing of the Development
------+DEV-02.01B
------+DEV-02.02B
------+DEV-02.01AC
------+DEV-02.02AC
---+DEV-03 Policies for Changes to System Components
------+DEV-03.01B
---+DEV-04 Safety Training and Awareness Programme Regarding Continuous Software Delivery and Associated Systems, Components or Tools
------+DEV-04.01B
------+DEV-04.02B
---+DEV-05 Design Documentation for Security Features
------+DEV-05.01B
---+DEV-06 Risk Assessment, Categorisation and Prioritisation of Changes
------+DEV-06.01B
------+DEV-06.02B
------+DEV-06.01AC
---+DEV-07 Testing Changes
------+DEV-07.01B
------+DEV-07.02B
------+DEV-07.03B
------+DEV-07.04B
------+DEV-07.05B
------+DEV-07.01AC
------+DEV-07 Supplementary Information - Complementary Customer Criteria
---+DEV-08 Logging of Changes
------+DEV-08.01B
------+DEV-08.02B
------+DEV-08.01AC
---+DEV-09 Version Control
------+DEV-09.01B
------+DEV-09.02B
------+DEV-09.03B
------+DEV-09.01AC
------+DEV-09.02AC
---+DEV-10 Approvals for Provision in the Production Environment
------+DEV-10.01B
------+DEV-10.02B
------+DEV-10.01AC
------+DEV-10 Supplementary Information - Complementary Customer Criteria
---+DEV-11 Protection of Development and Test Environments
------+DEV-11.01B
---+DEV-12 Separation of Environments
------+DEV-12.01B
------+DEV-12.02B
---+DEV-13 Transparency about Software Components
------+DEV-13.01B
------+DEV-13.02B
---+DEV-14 Secure Use of Third Party Hardware and Software
------+DEV-14.01B
------+DEV-14.02B
------+DEV-14.03B
------+DEV-14.01AC
---+DEV-15 Exceptions to the Change Management Process
------+DEV-15.01B
|
Procurement, Development and Modification of Information Systems (DEV)
Objective: Ensure information security in the development cycle of cloud service system components.
1. Pārskats
1.1 Atsauces
1.2 Identificētās prasības
1.3 Saistītie tiesību akti
2. Identificētās prasības
3. Saistītie tiesību akti
Tiesību akti
| Avots |
Regulējums |
- BSI -
EN: Publications of the Bundesamt für Sicherheit in der Informationstechnik (BSI, Federal Office for Information Security), https://www.bsi.bund.de/. This is not an official BSI website. Only the versions published by the BSI are authoritative.
DE: Veröffentlichungen des Bundesamts für Sicherheit in der Informationstechnik (BSI), https://www.bsi.bund.de/. Kein amtlicher Auftritt des BSI. Maßgeblich sind allein die vom BSI veröffentlichten Fassungen.
|