§01
About this domain.
This directory holds the GRC secure-development standards: security standards, quick-reference guides, compliance registers, policies, and procedures for developers and DevOps practitioners. Content addresses secure development baseline requirements, CI/CD pipeline security, developer toolchain security, and compliance controls for software development activities. These are normative GRC artefacts of the same shape as content in security/, risk/, and the other domain directories.
§02
Documents.
17 documents in this domain. Each links to its source on GitHub, where the corpus is version-controlled and continuously gated.
- PolicySecure Development and Engineering Policy↗
- StandardAPI Security Standard↗
- StandardAWS Cloud Hardening Baseline Standard↗
- StandardAzure Cloud Hardening Baseline Standard↗
- StandardContainer and Image Security Standard↗
- StandardDeveloper Security Requirements↗
- StandardDevOps Security Requirements↗
- StandardGoogle Cloud Platform Hardening Baseline Standard↗
- StandardMobile Application Security Standard↗
- StandardQuality Assurance and Testing Standard↗
- StandardSecurity Baseline and Standards Reference↗
- StandardSecurity Quick Reference↗
- StandardSoftware Composition Analysis Standard↗
- StandardSoftware Evaluation, Acceptance and Lifecycle Management Standard↗
- ProcedureSecure Code Review Procedure↗
- GuidelineAI Coding Assistant Security Guideline↗
- RegisterCompliance Controls and Gap Register Template↗