appsecq1
Category: Other
Updated: 17 Feb 2020
Contributors
Created byСерый Сердечный
Attachments
Events
W08
- Hydra - evaluate and prepare security controls
- Cognizant/Salesforce security testing
- Threat models review and actualization
- Vulnerabilities management (JIRA workflow)
- Shift-left approach (SecureSDLC)W09
- Hydra - finalize evaluation and guidelines
- Cognizant/Salesforce security testing
- Mamboo security testing
- Threat models review and actualization
- Release security testingW10
- Mamboo security testing
- Threat models review and actualizationW11
- Release security testing
- ASV assessment
- Threat models supportW12
- Security code review
- Threat models support
- ASV assessmentW13
- ASV assessment
- Release security testingPeriods
Reports/Meetings/Regular activities
Requirements review
Vulnerabilities report
Vulnerabilities management
Documentation/Processes/Release management
SAST/DAST
Comments