PCI DSS v4.0/Requirement 06: Develop and Maintain Secure Systems and Software/81 of 250
6.2.1Bespoke and custom software are developed securely
Control family: Requirement 06: Develop and Maintain Secure Systems and Software
Control description
Defined Approach Requirements:
Bespoke and custom software are developed securely, as follows:
- Based on industry standards and/or best practices for secure development.
- In accordance with PCI DSS (for example, secure authentication and logging).
- Incorporating consideration of information security issues during each stage of the software development lifecycle
Defined Approach Testing Procedures:
6.2.1 Examine documented software development procedures to verify that processes are defined that include all elements specified in this requirement.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.