zaita / sdlt
Zaita SDLT
Installs: 12
Dependents: 0
Suggesters: 0
Security: 0
Stars: 3
Watchers: 1
Forks: 2
Open Issues: 2
Type:silverstripe-recipe
Requires
- php: >=8.1
- silverstripe/graphql: ^3.8.2
- silverstripe/recipe-plugin: ^1.2
- zaita/sdlt-framework: 5.0.4
- zaita/sdlt-theme: 5.0.0
- dev-master
- 5.0.3
- 5.0.2
- 5.0.1
- 5.0.0
- 4.1.0
- 4.0.1
- 4.0.0
- 3.2.1
- 3.2.0
- 3.1.3
- 3.1.2
- 3.1.1
- 3.1.0
- 3.0.1
- 3.0.0
- 2.1.1
- 2.1.0
- 2.0.12
- 2.0.11
- 2.0.10
- 2.0.9
- 2.0.8
- 2.0.7
- 2.0.6
- 2.0.5
- 2.0.4
- 2.0.3
- 2.0.2
- 1.0.55
- 1.0.1
- 1.0.0
- dev-snyk-fix-76eba0922497f03cbd14f112720c7069
- dev-snyk-fix-1f8c755d312c148bfbbd90f5174b5397
- dev-snyk-fix-1efbbd28964039fba700890ac6d5f8b7
- dev-dependabot/composer/guzzlehttp/psr7-2.2.1
- dev-upgrade-3.1.0
- dev-Zaita-patch-2
- dev-Zaita-patch-1
- dev-feature/rearchitecture
- dev-dependabot/npm_and_yarn/themes/sdlt/elliptic-6.5.3
- dev-dependabot/npm_and_yarn/themes/sdlt/acorn-5.7.4
- dev-docs/setting-up-project-manually
- dev-dependabot/npm_and_yarn/themes/sdlt/lodash-4.17.19
- dev-fixes/security-patches
- dev-feature/data-dump-importer
- dev-elliot-sawyer-patch-1
This package is not auto-updated.
Last update: 2024-12-25 10:24:56 UTC
README
The SDLT, previously the Security Development Lifecycle Tool, is a web application tool that serves as a self-service entry point for following a quality assurance lifecycle process. This tool collects relevant information about a delivery, determines the risk rating and generates the appropriate requirements. The tool tailors the list of requirements to the projects specific needs, without providing unnecessary unrelated requirements. The process is derived from a security centric perspective, allowing the security teams and other stakeholders (e.g., privacy, data, finance) to establish custom guidance and requirements as checklist items for all deliveries.
The SDLT is used as a guide and reference for deliverying high quality outcomes, be they software release or entire projects. This encourages a security mindset among project teams and can be used to easily track the completion of requirements for the project.
The SDLT is a no-code solution, allowing quick and easy deployment of workflows that support organisational delivery processes. You can be up and running in a few minutes with the pre-configured work-flows.
The tool comes pre-configured with:
- Basic workflows to illustrate common scenarios
- Tasks covering basic concerns like privacy, security and data management
- Built in approval flows with delegation ability
- Digital security risk assessment capability
- Control validation audit capability
- Certification and accreditation capability
- Service inventory module for certification and accreditation
- Usage Reporting
This Fork
This fork is now the primarily repository for the SDLT.
The SDLT was previously developed by The New Zealand Transport Agency (Waka Kotahi), but they have now abandoned the project. This fork is to continue development of new functionality while ensuring the product remains open source.
Getting Help or Hosting
If you would like to run the SDLT, we first recommend downloading the code and following the deployment instructions yourself to have a go.
If you would prefer to have a custom demo available to you, please log an issue against this project with contact details (email) and we'll reach out.
If you would like professional hosting of the SDLT, please reach out to Catalyst (NZ) Limited.
If you would like a fully managed instance, with us looking after the day to day setup, configuration and maintenance, please log an issue against this project with your email and we'll reach out.
Documentation
Documentation for the SDLT can be found at: https://sdlt.readthedocs.io/en/latest/
This includes all relevant topics such as:
- Installing the SDLT
- Initial configuration and customisation
- Basic administration tasks
- How the digital security risk assessment methodology works
- How to configure single-sign on