Handles each vulnerability that may affect the platform and checks the advisory reaches every product built on it. The product security manager runs it with the product security architect, the release manager and the affected derivative teams.
MustThe material under review is a tagged version, and that version is named in the record.
MustReviewers received the material and this checklist early enough to prepare.
ShouldAt least one reviewer did not take part in the work under review, and at least one speaks for the products that will build on it.
ShouldThe scope of the review, the platform version and configurations covered, and anything excluded are stated at the start.
29 more items for registered members.
The full lifecycle detail, with its charts, flows, tables and every section, is for registered members. Registration is free and takes a minute. You come back to this page afterwards.