RV.1.2 Review, analyze, and/or test the software’s code to identify or confirm the presence of previously undetected vulnerabilities.

Statement

Review, analyze, and/or test the software’s code to identify or confirm the presence of previously undetected vulnerabilities.

Example 1:

Configure the toolchain to perform automated code analysis and testing on a regular or continuous basis for all supported releases.

Example 2:

See PW.7 and PW.8.

1. Prezentare generală

1.1 Referințe

1.2 Cerințe identificate

1.3 Reglementări asociate

2. Cerințe identificate

3. Reglementări asociate

Tichete legate

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final