Companies see value in transitioning to a DevOps process model, which allows faster turnaround and less waste in the development process; however, this new model opens companies up to new security risks that need to be monitored as the development teams iterate. Third party libraries significantly increase the vulnerability of software and need to continually be monitored for risk. To reduce risk and vulnerabilities, security should be an ongoing integrated part of the DevOps process by performing continual software security tests.
As a part of the DevSecOps journey, Product Security teams should be able to view and understand the risks that new products impart on the company, and provide insight into the paths to approve or mitigate risk before deployment. With faster cycle times and a desire to quickly deploy new products, a consistent and repeatable process is essential to ensure all risks are understood at all levels.
Benefits
- Consistent and repeatable process for managing initiatives and risks
- Faster cycle times by addressing security threats earlier in the development cycle
- Understand and minimize impacts to the organization through mitigating risks
- Ensure accountability for security during the development cycle
Key Features
Archer Product Security Development Assessment App-Pack enables organizations to:
- Document product initiatives for the organization
- Manage and track threat model information
- Identify risks and mitigation strategies associated with threat modeling
- Track results and approvals for Security Testing and Third Party Library
Solution and Platform Information
- Solution Area: IT & Security Risk Management
- Prerequisite Use Cases: This offering requires the Archer Issues Management use case.
- Supported Platform Version: Archer Platform Release 6.6
- Supported Archer Environments:
- On-Premises
- Archer Hosted
- Archer SaaS
Archer On-Demand Application (ODA) Licenses
Four (4) Archer On-Demand Application (ODA) licenses are required for Archer Product Security Development Assessment.
For More Information
To learn more about the Archer Product Security Development Assessment app-pack:
- Watch a short demonstration video;
- Review the Implementation Guide; and
- Download the Installation Package.
The Archer Product Security Development Assessment App-Pack is an offering provided through the Archer Exchange to enhance your existing Archer implementation. To learn more about the Archer Exchange, please visit the Archer Exchange on the Archer Community.
For Additional Support
To learn more about this offering, please contact your Account Rep for additional details. For technical support questions regarding this offering, please open a support case.
Archer Product Security Development Assessment
Initiative Leader Dashboard
Archer Product Security Development Assessment
Security Manager Dashboard
