Microsoft SDL: Get it to go
Today Microsoft made available theMicrosoft SDL Process Template . This was announced over on the SDL Blog. Roger has some comments on it as well.
The SDL Process Template is a free downloadable template for Visual Studio Team System that integrates the SDL directly into a customer’s software development environment. The template helps:
- Installs SDL requirements as work items
- Includes SDL-based check-in policies
- Customizes security bugs and queries
- Includes extensive SDL how-to and guidance documentation
- Generates auditable Final Security Review report
- Accommodates third-party tool integration, e.g. the SDL Threat Modeling Tool
- Includes project plans and security risk assessment templates