SFS 8 / SF B

Back to SFS 8

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Before deploying new software, does the organization retest previously fixed security issues to confirm they remain resolved throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Documented evidence confirms retesting of fixed security issues

Assessment criterion and evidence

Actor: the organization's development team. Scope: all new software releases. Evidence period: during the review period. Required evidence: Records showing retesting included specific validations for previously resolved security vulnerabilities. Negative criterion: No verification that resolved security defects remain fixed. Missing evidence: Pending evidence of retesting for resolved security defects

View the JSON record (opens in a new tab).

Assessment result: unset.