From c4efa6c36e2723f99d98ab6b5a60b464ef3a8ca0 Mon Sep 17 00:00:00 2001 From: gearnode Date: Wed, 8 Jan 2025 08:47:23 +0100 Subject: [PATCH] Add SDLC control Signed-off-by: Bryan Frimin --- ...-SRC-004_systems_development_life_cycle.md | 26 +++++++++++++++++++ 1 file changed, 26 insertions(+) create mode 100644 controls/application-security/source-code/APP-SRC-004_systems_development_life_cycle.md diff --git a/controls/application-security/source-code/APP-SRC-004_systems_development_life_cycle.md b/controls/application-security/source-code/APP-SRC-004_systems_development_life_cycle.md new file mode 100644 index 000000000..a910e2554 --- /dev/null +++ b/controls/application-security/source-code/APP-SRC-004_systems_development_life_cycle.md @@ -0,0 +1,26 @@ +--- +id: "APP-SRC-004" +category: "application-security/source-code" +revision-version: 1 +revision-date: "2024-01-08" +estimate-time: "1h" +frameworks: + - name: "soc2" + sections: ["CC1.4", "CC5.2", "CC8.1"] +--- + +## Purpose + +Formalizing a proper development lifecycle helps your engineer in +their jobs and helps you to scale your team. It reduces the chances of +human error. + +## Implementation + +Write a document with your development lifecycle. It should include: +planning, analysis, design, coding, testing, and maintenance. Don’t +forget secure coding practices (eg code review) and quality. + +## Evidence + +- System development lifecycle document