Software Development Lifecycle

Updates for this SFS are pending because supporting source research is incomplete. Existing catalog content is shown.

This set covers the delivery process for applications and services, including source control, build inputs, CI/CD pipelines, test execution, release approval, deployment, rollback, and retirement. Its questions should make ownership and the relationship between source changes and delivered artifacts explicit. Evidence may include repository records, pipeline results, and deployment records. Security requirements and risk treatment belong to SFS 8, independent security findings to SFS 9, and interface-specific controls to SFS C.

• SF 0
• SF 1
• SF 2
• SF 3
• SF 4
• SF 5
• SF 6
• SF 7
• SF 8
• SF 9
• SF A
• SF B
• SF C
• SF D
• SF E
• SF F