The SDL Process Template leverages the technology of Visual Studio Team System (VSTS) and Team Foundation Server (TFS) to automatically integrate the policy, process and tools associated with the Security Development Lifecycle version 4.1 into your software development environment. The downloadable template:
Eases the adoption of the SDL
The SDL Process Template automates the creation of SDL requirements and enables development teams to begin adopting the SDL process without having to be fully trained on the SDL. It integrates the SDL into everyday tasks by leveraging the existing development environment (Visual Studio) and the project-wide framework (VSTS) in a way that is familiar to program managers and testers, as well as developers.
Provides auditable security requirements and status
The SDL Process Template generates a detailed Final Security Review report that provides an up-to-the- minute overview of security issues, testing results, and status for all security requirements associated with a project. This report allows management to document and verify that SDL requirements were met prior to a product’s release.
Demonstrates security return on investment
The SDL Process Template allows for the integration of third-party tools that work with TFS. Through reporting, the template provides data that allows you to assess the effectiveness of your security tools. In addition, the template enables you to experience the benefits of the SDL by discovering security issues early in your development lifecycle, reducing the total cost of development.