diff --git a/controls/application-security/source-code/APP-SRC-004_systems_development_life_cycle.md b/controls/application-security/source-code/APP-SRC-004_systems_development_life_cycle.md
new file mode 100644
index 000000000..a910e2554
--- /dev/null
+++ b/controls/application-security/source-code/APP-SRC-004_systems_development_life_cycle.md
@@ -0,0 +1,26 @@
+---
+id: "APP-SRC-004"
+category: "application-security/source-code"
+revision-version: 1
+revision-date: "2024-01-08"
+estimate-time: "1h"
+frameworks:
+    - name: "soc2"
+      sections: ["CC1.4", "CC5.2", "CC8.1"]
+---
+
+## Purpose
+
+Formalizing a proper development lifecycle helps your engineer in
+their jobs and helps you to scale your team. It reduces the chances of
+human error.
+
+## Implementation
+
+Write a document with your development lifecycle. It should include:
+planning, analysis, design, coding, testing, and maintenance. Don’t
+forget secure coding practices (eg code review) and quality.
+
+## Evidence
+
+- System development lifecycle document