tailieunhanh - Mission-Critical Security Planner When Hackers Won’t Take No for an Answer phần 8

Trong nhiều năm qua cơ sở hạ tầng công nghệ khóa công khai (PKI) và chứng nhận kỹ thuật số đã nhận được rất nhiều phương tiện truyền thông chú ý rằng bạn sẽ nghĩ rằng chúng tôi muốn được nhìn thấy chấp nhận nhiều hơn bây giờ. | 292 Chapter 4 Business Worksheet for Secure Software IMPACT ANALYSIS ID BEFORE PLAN PERCENT IMPROVEMENT NEW VALUE Quality Management worksheet completed for this element template check box Employees Introduce security as a fundamental mission for software developers. Cross-train developers to the next level of detail on security concerns raised in our worksheets. Work with developers to make security a regular part of all documentation. Schedule regular security review meetings. Build time into schedules for security. Reward developers for thinking about security and for introducing well thought-out security features. Customers Work with customers to understand their security requirements and document them. How are you designing and developing software to better address customer security requirements and expectations Worksheet Business Worksheet for Secure Software. The Remaining Core and Wrap-up Elements 293 Owners Providers of chronically insecure software will increasingly be held responsible. Communicate this to owners. Companies that are perceived as providing insecure software products or services will be hurt. Introduce a top-down management philosophy reflecting the importance of public perception relating to product security. Suppliers and Partners Develop policies and procedures to hold suppliers and partners responsible for providing insecure products and services. If you bundle software with a partner and its software is insecure yours is too. Drive partners to security quality. Information Write specific focused security requirements for all high-impact information of any kind you manage with your software. Infrastructure Develop a plan and customer configuration guidance for protecting likely high-impact infrastructure with your software. Worksheet Business Worksheet for Secure Software. continued 294 Chapter 4 BUSINESSPEOPLE OWNERS Assure them that security is addressed in the software development process. Despite the liability disclaimers