T/ZHSIA 0001-2024 Active Group standards

T/ZHSIA 0001-2024 Software Security Development Capability Maturity Assessment Technical Specification

Publish Date: 2024-09-06 Implement Date: 2024-09-07 For services related to genuine standard inquiry, procurement, translation, and other related services in China, please Contact Us

Price: $ 20.00

Out of stock

Basic Information

Standard Code: T/ZHSIA 0001-2024

Standard Type: Group standards

Standard Status: Active

is_force_gb: no

CCS Name: -

ICS Name: Software development and system files

Publish Date: 2024-09-06

Implement Date: 2024-09-07

Scope

Scope: This document summarizes a set of models for assessing the maturity of software security development capabilities, namely SSDMM (Secure Software Development Capability Maturity Model). This document is suitable for evaluating an organization's software security development capabilities and can also serve as a basis for organizations to carry out software security development capability building. Main technical content: This group standard covers all activity points that Chinese software development organizations are currently concerned about, and summarizes a set of models for assessing the maturity of software security development capabilities, namely SSDMM (Secure Software Development Capability Maturity Model). Based on the concept of the software security development life cycle, the model constructs three dimensions of capabilities: the maturity level of capabilities, the organizational management capabilities, and the software security development process capabilities. The model refines the security capabilities into objectively quantifiable indicators, thereby determining the execution level of security practices and completing an objective evaluation of the organization's security capability maturity.

Development Information

Related Standards

GB/T 8567-1988 Replaced

GB/T 8567-1988 Guidelines for computer software product development documentation

Publish Date: 1988-01-07

GB/T 13400.1-1992 Replaced

GB/T 13400.1-1992 Terms used in network planning techniques

Publish Date: 1992-02-26

GB/T 13400.2-1992 Replaced

GB/T 13400.2-1992 General rule for representation on network planning techniques

Publish Date: 1992-02-26

GB/T 13400.3-1992 Replaced

GB/T 13400.3-1992 General program of network planning techniques used in project management

Publish Date: 1992-02-26

GB/T 13502-1992 Active

GB/T 13502-1992 Information processing—Program constructs and conventions for their representation

Publish Date: 1992-08-29

GB/T 14079-1993 Abolished

GB/T 14079-1993 Guideline on software maintenance

Publish Date: 1993-01-07