8 docs tagged with "desenvolvimento"

Reinforced practices and optional recommendations for organisations with greater maturity in secure development

Binary, auditable checklist to assess the practical adoption of the practices prescribed in Chapter 06 - Secure Development

Specifics of exception management in the context of secure development - SAST, linters and code review

Recommendations for writing secure code by language and stack, including prohibited patterns and validated good practices

How to apply secure development practices in each phase of the SDLC, with reusable user stories, auditable artefacts and an L1–L3 proportionality matrix

Secure coding practices, curation and selection of guidelines, automated validation and governance during development

Technical and process indicators for the assessment of the effectiveness of secure development controls, with thresholds per risk level and mapping to the cross-cutting SbD-ToE governance dimensions.

Policies needed to frame and reinforce the secure development practices defined in this chapter