workflow
Secure SDLC Phase-Gate Program
Operate the secure SDLC phase-gate program as a modular, decision-aware workflow where the accountable control owner chairs the intake, requirements, design, and build/release gates end to end. Each recurring operating cycle runs as a new workflow instance attached to the existing secure-SDLC phase-gate Control item (domains = secure_development_sdlc; framework = nist-800-53 / iso-27001 / cobit-2019 / nist-csf-2) — that Control already exists in the library, so the instance enriches it with this cycle's gate evidence rather than creating a duplicate control. In scope: chairing those four security-integrated lifecycle gates for every development initiative due this cycle, remediating held or blocked initiatives, and monitoring the process itself; it is self-initiating and consumes no upstream workflow package, and it seeds its own next cycle. Out of scope and distinct from it: the independent SDLC gate review's release-milestone verification, and the release-security-gate's technical testing practice.
Record JSON · Open in map · Data retrieval guide
Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.
Attributes
- domain
- controls
- department
- it
- lineOfDefense
- operate
Details
- teams
- it
- domains
- controls
- standards
- nist-800-53
- iso-27001
- cobit-2019
- nist-csf-2
- sourceTemplateId
- workflow-library:controls-secure-sdlc-phase-gate-program
- releaseId
- sha256:72fbb361652e21aa8489b2417f6663964be17b14d016ab666d678b92e457f419
- canonicalUrl
- https://workflow-library.com/all/?w=controls-secure-sdlc-phase-gate-program
- capabilities
- mappingStatus
- mapped
- lineOfDefense
- operate
- controls
- UC-SDLC-01
- UC-SDLC-02
- UC-SDLC-03
- UC-SDLC-04
- UC-SDLC-05
- roleIntegrity
- activityCount
- 0
- ermPhases
- lineRoles
- serviceModes
- warnings
Source
No record-specific source URL is provided.
Download workflow template · Release: sha256:72fbb361652e21aa8489b2417f6663964be17b14d016ab666d678b92e457f419
Connections
- Secure SDLC Phase-Gate Program operates UC-SDLC-05 — Enforce secure coding and input validation standards
- Secure SDLC Phase-Gate Program operates UC-SDLC-04 — Engineer systems with secure architecture and design
- Secure SDLC Phase-Gate Program operates UC-SDLC-03 — Define and approve security requirements for applications
- Secure SDLC Phase-Gate Program operates UC-SDLC-02 — Plan and resource development programs and projects
- Secure SDLC Phase-Gate Program operates UC-SDLC-01 — Follow a secure development lifecycle with approval gates