Documentation - V-222655

Title

Threat models must be documented and reviewed for each application release and updated as required by design and functionality changes or when new threats are discovered.

Description

<VulnDiscussion>Threat modeling is an approach for analyzing the security of an application. It is a structured approach that enables you to identify, quantify, and address the security risks associated with an application. Threat modeling is not an approach to reviewing code, but it does complement the security code review process. Threat modeling can optimize application security by identifying objectives and vulnerabilities, and then defining countermeasures to prevent, or mitigate the effec...

Fix Text (Documentation Requirement)

Establish and maintain threat models and review for each application release and when new threats are discovered. Identify potential mitigations to identified threats. Verify mitigations are implemented to threats based on their risk analysis.