DEV-06—Testing changes
>Control Description
Changes to the cloud service are subject to appropriate testing during software development and deployment.
The type and scope of the tests correspond to the risk assessment. The tests are carried out by appropriately qualified personnel of the Cloud Service Provider or by automated test procedures that comply with the state-of-the-art. Cloud customers are involved into the tests in accordance with the contractual requirements.
The severity of the errors and vulnerabilities identified in the tests, which are relevant for the deployment decision, is determined according to defined criteria and actions for timely remediation or mitigation are initiated.
Additional criteria: -
Ask AI
Configure your API key to use AI features.