Federal and Defense Software Development Standards and Laws Paper – Description
Secure Software Development Standards
This week, your studies consider federal expectations in terms of laws, decisions, and practices before moving to standards. Standards would include the federal standards applicable to the federal government as well as guidance to all other organizations. Most important would be the National Institute of Science and Technology (NIST). Their various publications include many techniques, approaches, and actions that have a considerable influence on software engineering and specifically SSDL for all organizations.
This week should also provide important foundations that can aid your progress in future weeks, including the Signature Assignment. While you cannot copy and paste work between assignments, your exploration and salient points might be useful for your choices in other weeks.
Laws and industry practices—such as those that apply to the federal government, healthcare organizations, financial institutions, organizations that use credit cards, and educational institutions—form some of the examples that can alter plans and actions within the SSDL arena. In terms of standards, NIST publishes multiple ranges of special publications that influence secure software, both directly and indirectly. An example would be specifications for multifactor authentication in e-commerce. This publication is likely to have an influence over software development and forms part of the Special Publication 1800 series although the 800 series and other publication categories also have significant content (National Institute of Standards and Technology [NIST], n.d.). This Computer Security Resource Center (CSRC) provides access to a wide variety of formal publications that will be useful throughout the course and other courses.
Despite the focus on U.S. federal government and related activities, there are many other sources of standards and best practices related to software development. Both U.S. and international standards should be considered as further sources during this week. One example would be the General Data Protection Regulation from the European Union (European Commission, 2019)
Make use of the resources within the federal government and global standards, complemented by peer-reviewed research articles in the NCU Library. Your best outcome while also saving time is to devise a purposeful plan to achieve requirements, integrate items important to your potential research topic in your dissertation, and items important to the organization that you use in this course. Your plan for the Signature Assignment should also be added when planning your supplemental reading and learning processes for the week.
Review this week’s resources carefully. You are expected to apply the information from these resources (as well as previously provided resources) when preparing your assignments.
References
European Commission. (2019). Data protection: Rules for the protection of personal data inside and outside the EU.
National Institute of Standards and Technology. (n.d.). Computer Security Resource Center: Publication search.
Assignment: Review Federal and Defense Software Development Standards and Laws
INSTRUCTIONS
For this assignment, you must extend the work you completed for the previous assignment by writing an APA styled paper that identifies the current laws, industry regulations, and standards that influenced your proposed actions to improve the secure software development for your selected organization.
This is an idea-centric paper, not a review of sources. You are expected to review the current laws, industry regulations, and standards and synthesize your understanding in relation to your selected organization.
References:
https://go.gale.com/ps/i.do?p=AONE&u=pres1571&id=G…
The post Federal and Defense Software Development Standards and Laws Paper first appeared on .
