Security Development Lifecycle

Chapter 6. Stage 1: Project Inception

In this chapter:

Determine Whether the Application Is Covered by SDL

Assign the Security Advisor

Build the Security Leadership Team

Make Sure the Bug-Tracking Process Includes Security and Privacy Bug Fields

Determine the “Bug Bar”

As a project starts—perhaps it’s a new version, iteration, or a brand new product—it’s important to get all the security ducks lined up correctly. From our experience, a good project start leads to a much smoother final security review and a more secure product.

The project inception phase has a number of discrete and important steps:

• Determine Whether the Application Is Covered by SDL.

• Assign the Security Advisor.

• Build the Security Leadership Team.

• Make Sure the Bug-Tracking Process Includes ...