In this video, learn about the various facets of documentation in the SDLC.
- [Instructor] Proper documentation during the development…process and during the coding itself,…is important to the security of our applications.…As mentioned previously in our discussions on code quality,…documentation was a large factor in quality and security.…For the CASP exam, you need to understand…the four types of documentation.…The security requirements traceability matrix,…a requirements definition, the system design document,…and test plans.…The security requirements traceability matrix, or SRTM,…is used to document the security requirements…that a new application must achieve.…
This document is often formed as a grid or a spreadsheet.…It provides a requirement, while each column…documents a specific description of the requirement,…the source of the requirement,…the objective of testing that requirement…and how it's going to be tested.…The SRTM is used by security engineers…to ensure that a piece of software…meets the level of assurance required.…A requirements definition is used to document…each function and security requirement…
- Best practices for conducting research
- Current threats and threat models
- Emerging social media platforms and their threats
- Integrating research into business functions
- Security activities across the systems and software development lifecycles
- Adapting solutions to meet business needs
- Collaborating with programmers, sales staff, facilities managers, and others
- Providing guidance to senior management
Skill Level Advanced
1. Research Methods
2 Security Activities across the Life Cycle
3. Collaboration with Other Business Units
What to do next2m 49s
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.