Secure development lifecycle
Design a security review workflow for a fictional enterprise application. Place threat modeling, architecture review and automated scanning at appropriate delivery stages, and explain how findings would block or permit release.
The Application Security Architect embeds security gates and threat modeling into delivery and integrates SAST, DAST, SCA and dependency scanning into CI/CD.
Source posting