RV.1.2 Review, analyze, and/or test the software’s code to identify or confirm the presence of previously undetected vulnerabilities.

Statement

Review, analyze, and/or test the software’s code to identify or confirm the presence of previously undetected vulnerabilities.

Example 1:

Configure the toolchain to perform automated code analysis and testing on a regular or continuous basis for all supported releases.

Example 2:

See PW.7 and PW.8.

1. Overzicht

1.1 Referenties

1.2 Geïdentificeerde eisen

1.3 Gerelateerde regelingen

2. Geïdentificeerde eisen

3. Gerelateerde regelingen

Gekoppelde issues

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final