sea-01-secureengineeringprinciples.md

SCF - SEA-01 - Secure Engineering Principles

Mechanisms exist to facilitate the implementation of industry-recognized cybersecurity & data privacy practices in the specification, design, development, implementation and modification of systems and services.

Mapped framework controls

GDPR

• Art 24.1
• Art 24.2
• Art 24.3
• Art 25.1
• Art 25.2
• Art 25.3
• Art 32.1
• Art 32.2
• Art 40.2
• Art 5.2

ISO 27002

• A.8.12
• A.8.26
• A.8.27

NIST 800-53

• SA-8
• SC-1
• SI-1

SOC 2

• CC2.2
• CC3.2
• CC5.1
• CC5.2

Control questions

Does the organization facilitate the implementation of industry-recognized cybersecurity & data privacy practices in the specification, design, development, implementation and modification of systems and services?