Secure Development
Secure-development practices and control records.
Maintain secure-development controls with their practice areas, lifecycle stages and tooling. Record adoption, findings and related control references.
What you can do
Register development controls
Create a control with its practice area, phase, automation level, tooling and recorded blocking flag. Maintain the record as the practice changes.
Track control adoption
Move a draft control to adopted, mark an adopted control as required, or retire it through the permitted lifecycle steps.
Review recorded delivery information
View recorded finding counts, pass rates, tooling and framework references, and maintain links to related controls.
Who uses it
- Engineering and application-security teams
- People governing secure-development practices
Things to know
- This module is a register. It does not run code scans, connect repositories or enforce pipeline gates. Automation levels, pass rates and the blocking flag describe recorded information and require validation by the responsible team.