Task Descriptor: Refine Security Policy |
This task describes the main steps that you need to perform when you refine a test policy with a focus on security.
Based on Method Task: Develop Security Test Policy
Relationships
Inputs | Mandatory: None | Optional: [Technical Architecture] [Technical Specification] Security Test Policy | External: None
Outputs | Security Test Policy
Steps
Determine the Main Types of Security Issues
Based on the application characteristics, industry standards and data, and your previous experience, define the main types of security issues that need to be tested.
Identify the Users of the Test Policy
Categorize the potential users of the test policy, based on their security skills, application knowledge, testing experience, familiarity with different tools and methodologies, and so on.
Select Types of Security Tests to Include
Select the types of security tests based on the user types, potential security issues, and the timing of the test execution within the overall development lifecycle.
Publish the Security Test Policy
Review the changes to the Security Test Policy, and make it available to the target audience.
Properties
Predecessor | Build Reports
Multiple Occurrences |
Event Driven |
Ongoing |
Optional |
Planned |
Repeatable |
© Copyright IBM Corp. 1987, 2009. All Rights Reserved.