4 docs tagged with "DEV"

Responsibilities of the Developer in the SbD-ToE

Concrete example of a training manual for developers on secure practices in PRs.

Technical and process indicators for the assessment of the effectiveness of secure development controls, with thresholds per risk level and mapping to the cross-cutting SbD-ToE governance dimensions.

Canonical catalogue of security requirements for the development process (DEV-001 to DEV-009), with applicability by risk level and acceptance criteria for code guidelines, linters, formal review, exception management, provenance and traceable annotations.