PO.1.1 Identify and document all security requirements for the organization’s software development infrastructures and processes, and maintain the …

Statement

Identify and document all security requirements for the organization’s software development infrastructures and processes, and maintain the requirements over time.

Example 1:

Define policies for securing software development infrastructures and their components, including development endpoints, throughout the SDLC and maintaining that security.

Example 2:

Define policies for securing software development processes throughout the SDLC and maintaining that security, including for open-source and other third-party software components utilized by software being developed.

Example 3:

Review and update security requirements at least annually, or sooner if there are new requirements from internal or external sources, or a major security incident targeting software development infrastructure has occurred.

Example 4:

Educate affected individuals on impending changes to requirements.

1. Ħarsa ġenerali

1.1 Referenzi

1.2 Rekwiżiti identifikati

1.3 Regolamenti relatati

2. Rekwiżiti identifikati

3. Regolamenti relatati

Kwistjonijiet marbuta

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final