Security and the Software Development Lifecycle

Overview

Integrate security early in the software development lifecycle. Software developers and security professionals have historically had an adversarial relationship. Software developers may believe security professionals get in the way of productivity while security professionals know that vulnerabilities get introduced in the software development lifecycle.

Fortunately, the barriers between these two disciplines are breaking down as companies recognise the importance of introducing security early in the software development lifecycle. This programme covers different software development methodologies as well as the different places that good security practices can be introduced in any software development methodology as well as how to implement them.

Key Takeaways

• Demonstrate how security can be introduced into common software development methodologies
• Identify capabilities necessary to improve existing practices within their organisations
• Examine elements of a simplified methodology to apply those elements to methodologies and processes already in place in their organisations
• Suggest security controls that can be applied within development processes in their own environment