Advanced Recommendations - Secure Architecture
Advanced practices for contexts of high maturity in secure architecture
Advanced practices for contexts of high maturity in secure architecture
Structured identification, analysis and mitigation of threats during the development lifecycle
Foundations, objectives and framing of the chapter dedicated to secure architecture in the software lifecycle
Integration of Secure Architecture practices throughout the development cycle
How to integrate threat modelling practices into technical architecture artefacts and approval processes
Organisational policies that support the adoption of secure architecture practices
Binary, auditable checklist for controlling the application of the secure architecture requirements
Organisational policy that defines the requirements for applying secure architecture principles throughout the lifecycle of applications classified L2 and L3, including baseline definition, management of architecture decisions (ADR), review of trust boundaries, integration with threat modelling and formal approval requirements.
Responsibilities of Software Architects in the SbD-ToE
Organisational policy that defines the mandatory nature, methodology, execution triggers, formal approval requirements, traceability and management of threat modelling artefacts throughout the lifecycle of applications classified L2 and L3.