P.2.2 Secure coding
Control Details
Objective
Decrease the number of security vulnerabilities introduced during source code creation.
Definition
Follow secure coding standards and practices appropriate to the development languages, APIs, AI models, and environment. Examples include validating all inputs, encoding outputs, and avoiding unsafe functions. Use development environments and static analysis tools that support compliance with secure coding practices as source code is being implemented.
Assessment Questions
- What kind of secure coding practices are used?
- How are these practices communicated to developers and enforced?