TA-05—Developer Security Training
>Control Description
Theme
Type
Policy/Standard
Training & Awareness Procedure>Implementation Guidance
1. Ensure that review of the security training material includes guidance on yearly Secure Coding Training for PCI developers and software engineers. 2. Ensure that the secure coding training was provided and completed by the employees within the last 365 days. 3. Make sure that engineers are registered for the Security Engineering Training program as required.
>Testing Procedure
1. Inspect the Security Training Material to validate that the standard provides guidance on annual Secure Coding Training for PCI developers and software engineers. 2. For a sample of employees obtain evidences showing secure coding training completion. Validate that the date of completion is in the last 365 days. 3. Ensure that all engineers are enrolled in the Security Engineering Training program as needed.
>Audit Artifacts
>Framework Mappings
Cross-framework mappings provided by Adobe CCF Open Source under Creative Commons License.
Ask AI
Configure your API key to use AI features.