Home

The Security Development Lifecycle Tool (SDLT)

The SDLT is a self-service web-app that provides a workflow through a Security Development Lifecycle process. This tool collects information about a deliverable and determines the tasks the submitter must complete in order to get approval for a production deployment.

The SDLT is built from 4 fundamental pieces of functionality:

1. A set of questions tailored to your delivery type
2. A collection of tasks to be completed prior to receiving security and business approval
3. Automated approval handling of Security Architects, Chief Information Security Officer and Business Owner.
4. The issuing of accreditation with re-certification notifications

Installation/Setup Instructions (Linux only)

• Installation/Setup Instructions - Apache
• Installation/Setup Instructions - Nginx
• Installation/Setup Instructions - Docker

Note: The SDLT has not been tested to run on Windows. Please use a Linux based Operating System to host the SDLT server. User devices can be Linux, Windows or MacOS using Edge, Chrome, FireFox or Safari.

Basic Concepts

• Pillars (Deliverable Types)
• Tasks
• Questionnaires
• User Flow
• Approval Flow
• Digital Security Risk Assessment
• Certification and Accreditation

Basic Configuration

• Accessing the Administration Panel and Customisation
• Creating/Editing a Pillar
• Creating/Editing a Task
• Creating/Editing Questions
• Digital Security Risk Assessment

Advanced Configuration

• Creating Risk Assessment Control Sets
• Creating/Importing/Exporting Control Sets

Basic Administration Tasks

• Changing Submitter On Submission
• Changing Business Owner on Submission
• Deleting a Submission

Advanced Administration Tasks

• Add Task to Submission

Technical Information

• JIRA Integration (Deprecated)