Control 16 — Application Software Security
CIS Critical Security Controls v8
14 articles
- CIS Controls v8 16.1 — Establish and Maintain a Secure Application Development Process
- CIS Controls v8 16.2 — Establish and Maintain a Process to Accept and Address Software Vulnerabilities
- CIS Controls v8 16.3 — Perform Root Cause Analysis on Security Vulnerabilities
- CIS Controls v8 16.4 — Establish and Manage an Inventory of Third-Party Software Components
- CIS Controls v8 16.5 — Use Up-to-Date and Trusted Third-Party Software Components
- CIS Controls v8 16.6 — Establish and Maintain a Severity Rating System and Process for Application Vulnerabilities
- CIS Controls v8 16.7 — Use Standard Hardening Configuration Templates for Application Infrastructure
- CIS Controls v8 16.8 — Separate Production and Non-Production Systems
- CIS Controls v8 16.9 — Train Developers in Application Security Concepts and Secure Coding
- CIS Controls v8 16.10 — Apply Secure Design Principles in Application Architectures
- CIS Controls v8 16.11 — Leverage Vetted Modules or Services for Application Security Components
- CIS Controls v8 16.12 — Implement Code-Level Security Checks
- CIS Controls v8 16.13 — Conduct Application Penetration Testing
- CIS Controls v8 16.14 — Conduct Threat Modeling