Summary

In this chapter, you learned about the several frameworks used for creating applications, including Waterfall, Agile, and DevOps. Each of these has a suite of tools that work along with them to help teams create secure operating systems, programs, and websites.

You also learned about the importance of ensuring that suppliers meet minimal security levels and have application security policies in place. These can be measured with maturity models such as CMMI and SAMM.

Operations and maintenance are essential considerations. Once an application is released, it’s important to determine whether patches will need to be created or whether the application will be updated with new features. You learned that applications are not static and must be changed for various reasons. Changes are planned and designed as part of the SDLC.

Finally, you learned how changes need to be tracked and managed, and that as you improve applications, you should make sure that changes are...