How to Do It
Practical integration of upskilling and onboarding practices into the development lifecycle
Practical integration of upskilling and onboarding practices into the development lifecycle
Organisational policy that defines the requirements for the security training and upskilling programme, including mandatory onboarding, training tracks by profile and risk level, the Security Champions programme, practical exercises, content updates, effectiveness KPIs and integration with individual performance objectives, proportionate to the criticality level (L1, L2, L3).
Canonical catalogue of security training and onboarding requirements (TRN-001 to TRN-009), with applicability by risk level and acceptance criteria for training tracks, verifiable onboarding, Security Champions and training effectiveness.
Strategies and practices to ensure that teams, profiles and stakeholders are prepared to apply Security by Design