SA-15(3)_criticality-analysis
Require the developer of the system, system component, or system service to perform a criticality analysis: At the following decision points in the sy
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Require the developer of the system, system component, or system service to perform a criticality analysis: At the following decision points in the sy
Threat Modeling and Vulnerability Analysis
Require the developer of the system, system component, or system service to reduce attack surfaces to [organization-defined].
Require the developer of the system, system component, or system service [organization-defined] to: Perform an automated vulnerability analysis using
Require the developer of the system, system component, or system service to use threat modeling and vulnerability analyses from similar systems, compo
Require the developer of the system, system component, or system service to follow a documented development process that: Explicitly addresses securit
Require the developer of the system, system component, or system service to provide the following training on the correct use and operation of the imp
Require the developer of the system, system component, or system service to: Produce, as an integral part of the development process, a formal policy
Require the developer of the system, system component, or system service to: Design and structure the security-relevant hardware, software, and firmwa