+SA-15(02) Security and Privacy Tracking Tools

SA-15(02) Security and Privacy Tracking Tools

Control

Require the developer of the system, system component, or system service to select and employ security and privacy tracking tools for use during the development process.

Discussion

System development teams select and deploy security and privacy tracking tools, including vulnerability or work item tracking systems that facilitate assignment, sorting, filtering, and tracking of completed work items or tasks associated with development processes.

Assessment Objective

  1. the developer of the system, system component, or system service is required to select and employ security tracking tools for use during the development process;
  2. the developer of the system, system component, or system service is required to select and employ privacy tracking tools for use during the development process.

Assessment Method

Examine

System and services acquisition policy system and services acquisition procedures procedures addressing development process, standards, and tools procedures addressing the integration of security and privacy requirements into the acquisition process solicitation documentation acquisition documentation service level agreements acquisition contracts for the system, system component, or system service documentation of the selection of security and privacy tracking tools evidence of employing security and privacy tracking tools system security plan privacy plan privacy impact assessment privacy risk assessment documentation other relevant documents or records

Interview

Organizational personnel with system and service acquisition responsibilities organizational personnel with information security responsibilities system developer organizational personnel with privacy responsibilities

1. Visão geral

1.1 Referências

1.2 Requisitos identificados

1.3 Regulamentos relacionados

2. Requisitos identificados

Requisitos

3. Regulamentos relacionados

Regulamentos

Pedidos ligados

Ligações
is blocked by SA-15(02) Security and Privacy Tracking Tools – Assessment Procedure
is blocked by Capabilities Deficiency Tracking