Task Descriptor: Refine Security Policy

This task describes the main steps that you need to perform when you develop a test policy with a focus on security.

Based on Method Task: Develop Security Test Policy

Determine the Main Types of Security Issues

Based on the application characteristics, industry standards and data, and your previous experience, define the main types of security issues that need to be tested.

Identify the Users of the Test Policy

Categorize the potential users of the test policy, based on their security skills, application knowledge, testing experience, familiarity with different tools and methodologies, and so on.

Select Types of Security Tests to Include

Select the types of security tests based on the user types, potential security issues, and the timing of the test execution within the overall development lifecycle.

Publish the Security Test Policy

Review the changes to the Security Test Policy, and make it available to the target audience.