This objective, and the other similar ‘include‘ objectives, simply state what has to be in your Product Security Levels for the Product Delivery Organisation. You may want to include more, but you cannot be missing any of these and still run a secure Product Delivery Organisation.
- Group or Individual
- Technology Community Of Practice
- Artefact
- Product Security Levels
- Concepts
- Product Artifact Integrity
- Document
- Objectives For Product Artifact Integrity
- Risk Type
- Viability
- Event
- The Likelihood of a Security Incident is increased
- Caused By
- Product Teams deploying unknown or incorrect versions of Product Artifacts
- Leading To
- Loss of customers, financial fraud losses, increased TCO, substantial fines/sanctions from an external regulatory body
-
I-SD-A-3-1
Implementation > Secure Deployment > Deployment Process
- Do you consistently validate the integrity of deployed artifacts?