WorksheetDOCXThreat intelligence: define the intelligence question and owner3 pagesSecurity operations
ProcedureDOCXTest data and environment management: select the minimum sufficient data method3 pagesSecure development
ProcedureDOCXSupplier security: supplier change notices and responsible recipients2 pagesSupplier and cloud servicesSupplier risk
ProcedureDOCXSupplier security: supplier personnel assignments2 pagesSupplier and cloud servicesSupplier risk
ProcedureDOCXSupplier assurance: select due diligence for credible failure conditions2 pagesRisk and assuranceSupplier and cloud services
ProcedureDOCXSupplier assurance: trace service dependencies and control points2 pagesRisk and assuranceSupplier and cloud services
ProcedureDOCXSource code repository and secrets: onboard people and automation separately2 pagesSecure development
ProcedureDOCXSupplier assurance: monitor service behavior and changing conditions2 pagesRisk and assuranceSupplier and cloud services
WorksheetDOCXSupplier assurance: define the service and operating boundary3 pagesRisk and assuranceSupplier and cloud services