Agentic SDLC via MCP
How to use the SbD-ToE MCP server to support the end-to-end agentic development process — the agent consults the manual via MCP at each stop of the flow, from mandate to kill-switch.
6 docs tagged with "sdlc"
View all tagsAnnotations and Evidence of Validations
Strategies for annotating security validation decisions and evidence in the code itself or in the development cycle
Example: End-to-end Agentic SDLC
Cross-cutting map of the secure development process for systems with AI agents — from mandate to kill-switch, with stops in each SbD-ToE chapter and a cross-reference to the AI Act, NIS2, DORA and the CRA
Governance of the Use of Automation and Assistants in the SSDLC
Prescription for the controlled use of automated generation tools (including AI) in development, without changing the application requirements
Secure Deployment
Principles and controls to ensure a secure, validated and traceable deployment process in production environments
Security Requirements Policy
Organisational policy that defines how security requirements must be selected, documented, traced, validated and maintained throughout the lifecycle of each application, proportionally to its classified risk level.