Cis 542 dB 10

"Integrating Security" 

Most of the security issues today can be traced back to flaws in application development. With this in mind, consider how a company can integrate best practices into their software development standards. 

• Review the SANS Institute’s InfoSec reading room paper titled “Integrating Security into Development, No Pain Required” found at https://www.sans.org/reading-room/whitepapers/analyst/integrating-security-development-pain-required-35060. How does the approach of the Security Development Lifecycle differ from the Software Development Lifecycle? Which method—Microsoft or Agile—would you use if you had to develop software, and why? What other available resource could you recommend to a company interested in implementing this approach? Share your examples with your classmates and provide links to any useful resources you find.