Advanced Practices in Security Requirements
Reinforced recommendations for environments with greater regulatory demands or maturity
Reinforced recommendations for environments with greater regulatory demands or maturity
Technical and organisational mechanisms to ensure automatic enforcement of security policies in IaC pipelines.
Organisational policies that support the adoption of secure architecture practices
Set of recommended policies to sustain and legitimise the CI/CD security practices described in the chapter
Organisational policies required to guarantee the security, traceability and governance of containers and images throughout the lifecycle.
Policies needed to frame and reinforce the secure development practices defined in this chapter
Organisational policies needed to frame and reinforce governance and security in the use of Infrastructure as Code (IaC)
Definition of automated policies in the pipeline with security gates that vary according to the risk level of the application.
The effective adoption of Chapter 01 - Risk Management - requires the existence of formal organisational policies that frame, legitimise and sustain the application of the practices described in this chapter.
Policies that underpin the definition, exception and validation of requirements