SAFECode - Managing a Software Security Program
Description
SAFECode's Managing a Software Security Program is a comprehensive guide to software security programs. It provides an overview of software security and discusses the key components of a software security program. It also includes a step-by-step process for setting up a software security program and tips for managing and sustaining a software security program.
More Information
https://safecode.org/category/resource-managing-software-security/
Description
Secure Development Practices is a set of tools and resources developed by SAFECode to help organizations implement secure coding practices. The tools include a Secure Coding Standard, a Secure Coding Guidelines checklist, and a Secure Coding self-assessment tool. The resources also include a series of articles and presentations on secure coding practices.
More Information
https://safecode.org/category/resource-secure-development-practices/
Description
The Software Security for Buyers and Government tool from SAFECode is a set of resources designed to help government organizations and software buyers understand the importance of software security and how to incorporate security into their procurement processes. The tool includes a software security maturity model, a guide to developing security requirements, and a list of resources for further reading. The tool is intended to help government organizations and software buyers get the most value out of their software investments by incorporating security into their decision-making processes.
More Information
https://safecode.org/category/resource-buyers-and-government/
Description
This tool is designed to help organizations secure their software supply chains. It provides guidance on how to assess and address risks in the supply chain, and includes a checklist of security controls. The tool also includes a list of resources on supply chain security.
More Information
https://safecode.org/blog/untangling-supply-chain-security/
Description
SAFECode's Trainiing and Culture Development tool helps organizations improve their software development processes and culture. The tool includes resources on how to assess and improve an organization's software development process, how to develop and implement training programs, and how to change an organization's culture. The tool also includes case studies and best practices from organizations that have successfully implemented these changes.
More Information
https://safecode.org/category/resource-training-and-culture/
