+Testing changes

Testing changes

Changes to the cloud service are subject to appropriate testing during software development and deployment.
The type and scope of the tests correspond to the risk assessment. The tests are carried out by appropriately qualified personnel of the Cloud Service Provider or by automated test procedures that comply with the stateofthe-art. Cloud customers are involved into the tests in accordance with the contractual requirements.
The severity of the errors and vulnerabilities identified in the tests, which are relevant for the deployment decision, is determined according to defined criteria and actions for timely remediation or mitigation are initiated.
Additonal Criteria-
Supplementary Information - About the CriteriaThe errors and vulnerabilities identified in tests can be assessed, for example, according to the Common Vulnerability Scoring System (CVSS).

1. Przegląd

Tytuł Norma

1.1 Odwołania

1.2 Zidentyfikowane wymagania

1.3 Powiązane regulacje

2. Zidentyfikowane wymagania

Wymagania
Źródło Wymaganie

3. Powiązane regulacje

Regulacje
Źródło Regulacja