16 docs tagged with "ciclo-vida"

Determining the criticality of applications in order to apply proportionality in security controls

Integration of Secure Architecture practices throughout the development cycle

How to apply secure CI/CD practices throughout the application lifecycle, with proportionality by risk, normalised user stories and auditable evidence

Applying criticality classification throughout the development lifecycle

How to apply the prescribed container security practices throughout the development and operations lifecycle

Practical integration of the dependency management, SBOM generation and SCA execution prescriptions throughout the application lifecycle

Practical integration of secure release and deployment practices into the software lifecycle

How to apply secure development practices in each phase of the SDLC, with reusable user stories, auditable artefacts and an L1–L3 proportionality matrix

Practical integration of upskilling and onboarding practices into the development lifecycle

Practical integration of governance, exception and contracting practices into the SbD-ToE lifecycle

Practical integration of IaC security practices into the SDLC, with proportionality by risk, reusable user stories and auditable evidence

Practical integration of monitoring and response practices into the secure lifecycle

Integration of requirements practices throughout the phases of the development lifecycle

Practical integration of continuous validation practices across the different phases of the application lifecycle

Integration of threat modelling throughout the development cycle

Why — determining the criticality of applications in order to apply proportionality in security controls