PW.4.2 Create and maintain well-secured software components in-house following SDLC processes to meet common internal software development needs that cannot …

Statement

Create and maintain well-secured software components in-house following SDLC processes to meet common internal software development needs that cannot be better met by third-party software components.

Example 1:

Follow organization-established security practices for secure software development when creating and maintaining the components.

Example 2:

Determine secure configurations for software components, and make these available (e.g., as configuration-as-code) so developers can readily use the configurations.

Example 3:

Maintain one or more software repositories for these components.

Example 4:

Designate which components must be included in software to be developed.

Example 5:

Implement processes to update deployed software components to newer versions, and maintain older versions of software components until all transitions from those versions have been completed successfully.

1. Översikt

1.1 Referenser

1.2 Identifierade krav

1.3 Relaterade regleringar

2. Identifierade krav

3. Relaterade regleringar

Länkade ärenden

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final