SDL Key Success Factors

Accuracy of planned SDL activities (Key Success Factor for SDL Phase)

A1

Product risk profile (Key Success Factor for SDL Phase)

A1

Accuracy of threat profile (Key Success Factor for SDL Phase)

A1

Coverage of relevant regulations, certifications, and compliance frameworks (Key Success Factor for SDL Phase)

A1

Coverage of security objectives needed for software (Key Success Factor for SDL Phase)

A1

Identification of business requirements and risks - CIA (Key Success Factor for SDL Phase)

A2

Effective threat modeling (Key Success Factor for which TWO SDL Phases)

A2, A3

Effective architectural threat analysis (Key Success Factor for SDL Phase)

A2

Effective risk mitigation strategy (Key Success Factor for SDL Phase)

A2

Accuracy of DFDs (Key Success Factor for SDL Phase)

A2

Comprehensive security test plan (Key Success Factor for SDL Phase)

A3

Design security analysis (Key Success Factor for SDL Phase)

A3

Privacy implementation assessment (Key Success Factor for SDL Phase)

A3

Policy compliance review (updates) (Key Success Factor for SDL Phase)

A3

Security test case execution (Key Success Factor for SDL Phase)

A4

Security testing: all types completed, problems remediated (Key Success Factor for SDL Phase)

A4

Privacy validation and remediation (Key Success Factor for SDL Phase)

A4

Policy compliance review, without "(updates)" (Key Success Factor for SDL Phase)

A4

Policy compliance analysis: final review of security and compliance requirements (Key Success Factor for SDL Phase)

A5

Vulnerability scanning (Key Success Factor for SDL Phase)

A5

Penetration testing (Key Success Factor for SDL Phase)

A5

Open-source licensing review (Key Success Factor for SDL Phase)

A5

Final security review (Key Success Factor for SDL Phase)

A5

Final privacy review (Key Success Factor for SDL Phase)

A5

Customer engagement framework (Key Success Factor for SDL Phase)

A5

External vulnerability disclosure response process (Key Success Factor for SDL Phase)

PRSA

Post-release certifications (Key Success Factor for SDL Phase)

PRSA

Third-party security reviews (Key Success Factor for SDL Phase)

PRSA

SDL cycle for any architectural changes or code reuses (Key Success Factor for SDL Phase)

PRSA

Security strategy and process for legacy code, M&A, and EOL products (Key Success Factor for SDL Phase)

PRSA