12 docs tagged with "maturidade"

Reinforced recommendations for critical contexts or environments with high maturity

Advanced practices to reinforce the security, traceability and auditability of critical deployments.

Advanced practices for contexts of high maturity in secure architecture

Reinforced practices and optional recommendations for organisations with greater maturity in secure development

Recommendations for organisations with greater maturity in continuous training, automation and behavioural security.

Advanced practices for high maturity in logging, adaptive detection and correlation between events.

This annex presents non-mandatory but highly recommended practices for organisations that wish to reach higher levels of maturity and auditability in risk management applied to the software lifecycle.

Reinforced practices for contexts of greater maturity or regulatory requirements in IaC projects.

Method used to validate claims of traceability, maturity and mitigated threats in the SbD-ToE manual

Canonical catalogue of organisational security governance requirements (GOV-001 to GOV-017), with applicability by risk level and acceptance criteria for ownership, exceptions, contracting, traceability, continuous validation, maturity, technical onboarding of third parties, access review, coordinated vulnerability disclosure, privileged accounts and identity lifecycle.

How the governance model contributes to the evolution of security maturity

Organisational policy that defines the requirements for the definition, collection, analysis and reporting of security governance KPIs, including metric categories, reporting cadence, responsibilities, intervention thresholds and integration with maturity frameworks (SAMM, SSDF), proportionate to the criticality level (L1, L2, L3).