Discussion 8 Software Development Security

TASK

Your Task: Develop an “intake” briefing for a group of software engineers who have been tasked with developing a standard set of security review processes for virtual teams. The purpose of these processes is to ensure that compliance for software security requirements is verified resulting in software applications and software-based products where security is “built in.” The company also intends that these processes be used towards the organization’s achievement of Capability Maturity Model Integration (CMMI) Level 3 — Defined.

Background: Software development is a complex task, especially as technology changes at the speed of light, environments evolve, and more expectations are placed upon vendors who want to be competitive within the software market. Many software development organizations also depend upon virtual teams whose members are geographically dispersed. This complexity also makes implementing and testing security features (for software applications) much more challenging.