TDA-09—Cybersecurity & Data Protection Testing Throughout Development
Weight: 9
>Control Description
Mechanisms exist to require system developers/integrators consult with cybersecurity and data protection personnel to:
(1) Create and implement a Security Testing and Evaluation (ST&E) plan, or similar capability;
(2) Implement a verifiable flaw remediation process to correct weaknesses and deficiencies identified during the security testing and evaluation process; and
(3) Document the results of the security testing/evaluation and flaw remediation processes.
>Cross-Framework Mappings
SOC 2 TSC (Detailed)
NIST SP 800-218 SSDF
Ask AI
Configure your API key to use AI features.