6 docs tagged with "evidências"

How to use AI/GenAI to accelerate security testing (planning, triage, regressions, fuzzing and validation) without degrading evidence, confidentiality or human control

Model for the recording and formal justification of security decisions and deliverables

Risks introduced by pervasive automation in the CI/CD pipeline and the corresponding control, validation and evidence measures

Identification and mitigation of the risks introduced by automation in the chain of building, validation and execution of container images

Cross-cutting organisational policy that defines the traceability requirements between requirements, controls, validation evidence, build artefacts and operational events, ensuring that the security posture is auditable continuously and in proportion to the application's risk level.

Prescriptive rules for the secure use of automation/assistance in writing and changing IaC, with validations and evidence by risk level