| Source | Azure Portal | ||
| Display name | Microsoft Managed Control 1606 - Developer Security Testing And Evaluation | Threat And Vulnerability Analyses | ||
| Id | baa8a9a4-5bbe-4c72-98f6-a3a47ae2b1ca | ||
| Version | 1.0.0 Details on versioning |
||
| Category | Regulatory Compliance Microsoft Learn |
||
| Description | Microsoft implements this System and Services Acquisition control | ||
| Additional metadata |
Name/Id: ACF1606 / Microsoft Managed Control 1606 Category: System and Services Acquisition Title: Developer Security Testing And Evaluation | Threat And Vulnerability Analyses Ownership: Customer, Microsoft Description: The organization requires the developer of the information system, system component, or information system service to perform threat and vulnerability analyses and subsequent testing/evaluation of the as-built system, component, or service. Requirements: In accordance with Microsoft’s Security Development Lifecycle (SDL), security testing occurs in several phases throughout the SDL process. Specifically, security testing occurs during the following phases: * Phase 3 – Implementation * Phase 4 – Verification * Phase 5 – Release Testing at the release phase is performed on the as-built system. Vulnerabilities found at the release testing phase are tracked and remediated. |
||
| Mode | Indexed | ||
| Type | Static | ||
| Preview | False | ||
| Deprecated | False | ||
| Effect | Fixed audit |
||
| RBAC role(s) | none | ||
| Rule aliases | none | ||
| Rule resource types | IF (2) Microsoft.Resources/subscriptions Microsoft.Resources/subscriptions/resourceGroups |
||
| Compliance | Not a Compliance control | ||
| Initiatives usage | none | ||
| History | none | ||
| JSON compare | n/a | ||
| JSON |
|