SFS 8 / SF 9

Back to SFS 8

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Has every new software commit undergone formal security code review by qualified personnel before integration into the main development branch throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Documented evidence showing each commit was reviewed by personnel with verified security coding qualifications

Assessment criterion and evidence

Actor: Development teams. Scope: All new software commits requiring integration into main development branches. Evidence period: The review period. Required evidence: Commit integration logs showing security review completion; Records verifying reviewer security coding qualifications. Negative criterion: Evidence of unreviewed commits or reviewers lacking required qualifications. Missing evidence: Pending until documentation of review processes and outcomes is provided

View the JSON record (opens in a new tab).

Assessment result: unset.