List of works
Magazine article
The Security Development Lifecycle in the Context of Accreditation Policies and Standards
Published 02/14/2017
IEEE Security & Privacy Magazine, 15, 1, 52 - 57
The proposed security development lifecycle (SecDLC) model delivers a perpetual cycle of information security management and refinement. Using real-world examples, the authors show how SecDLC ensures the goals of preserving, monitoring, and improving security practices, policies, and standards in private and public sectors. The authors describe the four phases of SecDLC, comparing and contrasting them to existing security development models.