All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,788
- 1,325
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 22,609–22,632 of 31,788 skills
- PO.5.1 Po51Separate and protect each environment involved in software development.Votes: 0GitHub stars: 3,518
- PO.4.2 Po42Implement processes, mechanisms, etc.Votes: 0GitHub stars: 3,518
- PO.4.1 Po41Define criteria for software security checks and track throughout the SDLC.Votes: 0GitHub stars: 3,518
- PO.3.3 Po33Configure tools to generate artifacts of their support of secure software development practices as defined by the organization.Votes: 0GitHub stars: 3,518
- PO.3.2 Po32Follow recommended security practices to deploy, operate, and maintain tools and toolchains.Votes: 0GitHub stars: 3,518
- PO.3.1 Po31Specify which tools or tool types must or should be included in each toolchain to mitigate identified risks, as well as how the toolchain components aVotes: 0GitHub stars: 3,518
- PO.2.3 Po23Obtain upper management or authorizing official commitment to secure development, and convey that commitment to all with development-related roles andVotes: 0GitHub stars: 3,518
- PO.2.2 Po22Provide role-based training for all personnel with responsibilities that contribute to secure development.Votes: 0GitHub stars: 3,518
- PO.2.1 Po21Create new roles and alter responsibilities for existing roles as needed to encompass all parts of the SDLC.Votes: 0GitHub stars: 3,518
- PO.1.3 Po13Communicate requirements to all third parties who will provide commercial software components to the organization for reuse by the organization’s o...Votes: 0GitHub stars: 3,518
- PO.1.2 Po12Identify and document all security requirements for organization-developed software to meet, and maintain the requirements over time.Votes: 0GitHub stars: 3,518
- PO.1.1 Po11Identify and document all security requirements for the organization’s software development infrastructures and processes, and maintain the requiremenVotes: 0GitHub stars: 3,518
- Supply Chain Risk Management Plan 03 17Develop a plan for managing supply chain risks associated with the research and development, design, manufacturing, acquisition, delivery, integrat...Votes: 0GitHub stars: 3,518
- Supply Chain Requirements And ProcessesEstablish a process for identifying and addressing weaknesses or deficiencies in the supply chain elements and processes.Votes: 0GitHub stars: 3,518
- Acquisition Strategies Tools AndAcquisition Strategies, Tools, and MethodsVotes: 0GitHub stars: 3,518
- Unsupported System Components 03 16 02Replace system components when support for the components is no longer available from the developer, vendor, or manufacturer.Votes: 0GitHub stars: 3,518
- Security Engineering Principles 03 16Security Engineering PrinciplesVotes: 0GitHub stars: 3,518
- External System Services 03 16 03Require the providers of external system services used for the processing, storage, or transmission of CUI to comply with the following security re...Votes: 0GitHub stars: 3,518
- System Security Plan 03 15 02 SystemDevelop a system security plan that: Defines the constituent system components; Identifies the information types processed, stored, and transmitted byVotes: 0GitHub stars: 3,518
- Rules Of Behavior 03 15 03 Rules OfEstablish rules that describe the responsibilities and expected behavior for system usage and protecting CUI.Votes: 0GitHub stars: 3,518
- Policy And Procedures 03 15 01 PolicyDevelop, document, and disseminate to organizational personnel or roles the policies and procedures needed to satisfy the security requirements for...Votes: 0GitHub stars: 3,518
- System Monitoring 03 14 06 SystemMonitor the system to detect: Attacks and indicators of potential attacks and Unauthorized connections. Identify unauthorized use of the system. MonitVotes: 0GitHub stars: 3,518
- Security Alerts Advisories AndReceive system security alerts, advisories, and directives from external organizations on an ongoing basis.Votes: 0GitHub stars: 3,518
- Malicious Code Protection 03 14 02Implement malicious code protection mechanisms at system entry and exit points to detect and eradicate malicious code.Votes: 0GitHub stars: 3,518