PS.3.1 Securely archive the necessary files and supporting data (e.g., integrity verification information, provenance data) to be retained for each software …

Statement

Securely archive the necessary files and supporting data (e.g., integrity verification information, provenance data) to be retained for each software release.

Example 1:

Store the release files, associated images, etc. in repositories following the organization’s established policy. Allow read-only access to them by necessary personnel and no access by anyone else.

Example 2:

Store and protect release integrity verification information and provenance data, such as by keeping it in a separate location from the release files or by signing the data.

1. Prehľad

1.1 Odkazy

1.2 Identifikované požiadavky

1.3 Súvisiace predpisy

2. Identifikované požiadavky

3. Súvisiace predpisy

Prepojené úlohy

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final