PO.4.2—Implement processes, mechanisms, etc. to gather and safeguard the necessary information in support of the criteria.
PO.4
>Control Description
Implement processes, mechanisms, etc. to gather and safeguard the necessary information in support of the criteria.
>Practice: PO.4
Define and Use Criteria for Software Security Checks
Help ensure that the software resulting from the SDLC meets the organization’s expectations by defining and using criteria for checking the software’s security during development.
>Notional Implementation Examples
- 1.Use the toolchain to automatically gather information that informs security decision-making.
- 2.Deploy additional tools if needed to support the generation and collection of information supporting the criteria.
- 3.Automate decision-making processes utilizing the criteria, and periodically review these processes.
- 4.Only allow authorized personnel to access the gathered information, and prevent any alteration or deletion of the information.
>Cross-Framework References
Mappings to related frameworks and standards from NIST SP 800-218
Ask AI
Configure your API key to use AI features.