Deployment
The process of practices
Practices that result in collections of corporate knowledge used to carry out software security activities, including both proactive security guidance and organizational threat modeling.
Penetration Testing
The penetration testing practice involves standard outside in testing of the sort carried out by security specialists. Penetration testing focuses on vulnerabilities in final configuration, and provides direct feeds to defect management and mitigation.
Learn moreSoftware Environment
The software environment practice concerns itself with OS and platform patching, web application firewalls, installation and configuration documentation, application monitoring, change management, and ultimately, code signing.
Learn moreConfiguration and Vulnerability Management
The configuration management and vulnerability management practice concerns itself with patching and updating applications, version control, defect tracking and remediation, and incident handling.
Learn more