RV.3.2 Analyze the root causes over time to identify patterns, such as a particular secure coding practice not being followed consistently.

Statement

Analyze the root causes over time to identify patterns, such as a particular secure coding practice not being followed consistently.

Example 1:

Record lessons learned through root cause analysis in a wiki that developers can access and search.

Example 2:

Add mechanisms to the toolchain to automatically detect future instances of the root cause.

Example 3:

Update manual processes to detect future instances of the root cause.

1. Pārskats

1.1 Atsauces

1.2 Identificētās prasības

1.3 Saistītie tiesību akti

2. Identificētās prasības

3. Saistītie tiesību akti

Saistītie uzdevumi

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final