SFS 8 / SF 2

Back to SFS 8

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Has every software design been formally reviewed against documented security requirements to identify and address potential vulnerabilities during the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: documented design review records showing security requirements verification and vulnerability resolution

Assessment criterion and evidence

Actor: organization's development team. Scope: new software systems during design phase. Evidence period: review period. Required evidence: dated design review records with security annotations; documented resolution of identified security vulnerabilities. Negative criterion: absence of verifiable design review documentation meeting security criteria. Missing evidence: pending verification when evidence is unavailable or incomplete

View the JSON record (opens in a new tab).

Assessment result: unset.