Secure Development Lifecycle
What is Secure Development Lifecycle?
A process that integrates security practices and testing throughout every phase of software development, from design through deployment and maintenance.
Terms that appear alongside secure development lifecycle
Each of these is named in at least one of the same controls as secure development lifecycle. The number is how many controls name both.
- vulnerability 6 shared controls
- nist 5 shared controls
- cybersecurity 4 shared controls
- cisa 4 shared controls
- integrity 4 shared controls
- iec 62443 3 shared controls
- software bill of materials 3 shared controls
- audit 3 shared controls
Frameworks that govern secure development lifecycle
What the standards actually require on secure development lifecycle
Requirements naming secure development lifecycle across 6 standards, quoted from the control text.
On request, describes the supplier's processes and controls for the section 5 SDLC requirements, including software updates and patching, preparing the Society for the 6.3.4 survey.
iacs-unified-requirements-e26e27-cyber-resilience-of-ships-and-on-board-systems::E27-3.1.6 · E27 3.1.6 Secure development lifecycle documents →Operate supply chain security + secure development lifecycle (SDL) + privacy + multi-vendor trust per O-RAN WG11 Security Requirements + Open Fronthaul vendor profile + national telecom security regimes.
ORANWG11-8 · Supply Chain, Secure Development Lifecycle, Privacy, Multi-Vendor Trust →The entity keeps, and follows, a policy and procedures for managing its software development lifecycle securely. The assessor reads them and confirms their use with the development team.
pci-3ds-core-security-standard::P1-3.1.1 · P1-3.1.1 Secure development lifecycle policy and procedures →Build applications through a secure development lifecycle so the organisation's security requirements are applied at design, build, deployment and operation.
CCM-AIS-04 · Secure Application Design and Development →Apply NIST SP 800-123 Guide to General Server Security published July 2008 + foundational reference for server hardening + complement to NIST SP 800-53 + NIST CSF 2.0 PROTECT function + NIST SP 800-44 Public Web Servers + NIST SP 800-45 Email Servers + NIST SP...
NISTSP123-1 · Server Security Planning and Lifecycle Considerations →Operate cyber security per OSFI B-13 Domain 3 aligned with NIST Cybersecurity Framework 2.0 functions (Govern + Identify + Protect + Detect + Respond + Recover).
OSFIB13-3 · Cyber Security: Identification, Protection, Detection, Response, Recovery →Questions people ask about secure development lifecycle
What is Secure Development Lifecycle?
Why is Secure Development Lifecycle important for compliance?
Which compliance frameworks address Secure Development Lifecycle?
Where can I learn more about Secure Development Lifecycle?
See how Secure Development Lifecycle applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.