Used to prepare and hold the Security architecture approved review: entry criteria, evidence, decisions frozen, compliance evidence and the decision record. Run by the product security owner with the presenters named in the gate review pack.
MustSecurity architecture specification: reviewed and approved.
MustRequirements allocated to architecture elements: every requirement allocated.
MustKey management specification: approved, including provisioning and revocation.
MustThreat model: updated for the approved architecture.
MustSecurity verification plan: approved.
ShouldOpen actions from the previous security gate are closed or carried with owners.
44 more items for registered members.
The full lifecycle detail, with its charts, flows, tables and every section, is for registered members. Registration is free and takes a minute. You come back to this page afterwards.