Skip to content

Commit

Permalink
Update sdlc.md
Browse files Browse the repository at this point in the history
  • Loading branch information
rmonroe-va authored Nov 14, 2023
1 parent 037f070 commit a361928
Showing 1 changed file with 3 additions and 0 deletions.
3 changes: 3 additions & 0 deletions docs/sdlc.md
Original file line number Diff line number Diff line change
Expand Up @@ -3,16 +3,19 @@
We covered this throughout the document, but here is a quick summary:

**People**

- Integrated cybersecurity culture (cross-functional teams)
- Technical assessors (from your performer, or from your AO’s contract(s))

**Process**

- Perform all RMF steps
- Create Living documentation by way of your SDLC toolsuite
- Follow NIST Guidance + create an ongoing authorization playbook
- Establish continuous delivery, with metrics for high quality and reduced risk

**Technology / Automation**

- Implement high common controls inheritance via opinionated cloud platform
- Modern Security Requirements Management (e.g. Tracer or SD Elements)
- Static Application & Dependency Vulnerability Scanning (e.g. Snyk)
Expand Down

0 comments on commit a361928

Please sign in to comment.