search

Riccardo-ten-Cate / skf

Security knowledge framework
0 stars 0 forks source link

sad #79

Open Riccardo-ten-Cate opened 5 years ago

Riccardo-ten-Cate commented 5 years ago

aso

skf-integration[bot] commented 5 years ago

alt text

Security knowledge framework!

Identify all components

 Description:

Components are defined in terms of the business functions and/or security functions they provide.
It is easier for forensics to do their investigations whenever a breach has happened on an application.

These insights also help whenever an update or release is made on the application to determine what security
risks are effectively covered by the security functions. 

 Solution:

Verify that all application components are defined in terms of the business functions
and/or security functions they provide.