tda-02-minimumviableproductmvpsecurityrequirements.md

SCF - TDA-02 - Minimum Viable Product (MVP) Security Requirements

Mechanisms exist to ensure risk-based technical and functional specifications are established to define a Minimum Viable Product (MVP).

Mapped framework controls

ISO 27002

• A.8.25
• A.8.29
• A.8.30

NIST 800-53

• SA-4

SOC 2

• CC5.2

Control questions

Does the organization ensure risk-based technical and functional specifications are established to define a Minimum Viable Product (MVP)?