Timeline for What are security best practices and compliance areas in Agile Software Development process
Current License: CC BY-SA 4.0
9 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Feb 29, 2020 at 15:50 | vote | accept | dev | ||
| Feb 28, 2020 at 14:20 | answer | added | Daniel | timeline score: 1 | |
| Feb 28, 2020 at 10:50 | review | Close votes | |||
| Mar 14, 2020 at 7:45 | |||||
| Feb 28, 2020 at 10:37 | comment | added | dev | Thanks for your guideance. I am at point that any answer would help. High, low concerns, low/med/high budget, no sec, small sec, big sec resource. Allow me to pick from those and I will make my "own" checklist. Looking for other inspiration/guidance/ideas. | |
| Feb 28, 2020 at 10:30 | comment | added | Conor Mancone | The issue isn't that this question is tricky, the issue is that a "typical software/SaaS company" doesn't exist. Every company has their own particular concerns, their own budget, their own level of resources. Two different companies will have two completely different "answers". | |
| Feb 28, 2020 at 10:26 | comment | added | dev | Well, I am looking for the most common, popular, general checklist or areas to check for a typical software/SaaS company. I can imagine there are tons of them out there. Maybe somebody can share something, they created. For example I was thinking to check CIA (Confidentiality Integrity Availability) areas, but not sure about subcategories. I can than form questions for the checklist. If you have ideas where to find inspiration for question, that would be also great. I know this is a tricky question, also to have the balance of questions amount and security gain | |
| Feb 28, 2020 at 10:03 | comment | added | Conor Mancone | How experienced are you with running the hardware security modules needed to properly store nuclear launch codes? My point of course is simple: there isn't one checklist. It isn't about "Secure" or "not secure". It's about "Secure enough for me". The general concept you are looking for is threat modeling. | |
| Feb 28, 2020 at 9:10 | history | edited | dev | CC BY-SA 4.0 |
edited body
|
| Feb 28, 2020 at 8:31 | history | asked | dev | CC BY-SA 4.0 |