Used before work on Security Requirements & Compliance Targets starts, to confirm the opening gate is passed, the inputs are ready and the team and plan are in place. Run by the product security owner with the stage leads.
MustThreat model baselined has been passed and its conditions are recorded.
MustThreat model: reviewed and baselined.
MustAttack surface analysis: every external interface, debug path and lifecycle state covered.
MustRisk treatment record: every high risk mitigated or formally accepted.
26 more items for registered members.
The full lifecycle detail, with its charts, flows, tables and every section, is for registered members. Registration is free and takes a minute. You come back to this page afterwards.