{"catalogRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","download":{"releaseId":"sha256:d16e0b54cab2d44a965b8ae2f42d27154be57936cebb154987071598792b70ae","slug":"controls-secure-sdlc-phase-gate-program","url":"/controls/assets/agent_workflow-controls-secure-sdlc-phase-gate-program-21fe0d97.c02301afb80d021b.json"},"kind":"record","record":{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"canonicalUrl":"https://assureswarm.com/workflows/all/?w=controls-secure-sdlc-phase-gate-program","description":"Operate the secure SDLC phase-gate program as a modular, decision-aware workflow where the accountable control owner chairs the intake, requirements, design, and build/release gates end to end. Each recurring operating cycle runs as a new workflow instance attached to the existing secure-SDLC phase-gate Control item (domains = secure_development_sdlc; framework = nist-800-53 / iso-27001 / cobit-2019 / nist-csf-2) — that Control already exists in the library, so the instance enriches it with this cycle's gate evidence rather than creating a duplicate control. In scope: chairing those four security-integrated lifecycle gates for every development initiative due this cycle, remediating held or blocked initiatives, and monitoring the process itself; it is self-initiating and consumes no upstream workflow package, and it seeds its own next cycle. Out of scope and distinct from it: the independent SDLC gate review's release-milestone verification, and the release-security-gate's technical testing practice.","details":{"canonicalUrl":"https://assureswarm.com/workflows/all/?w=controls-secure-sdlc-phase-gate-program","capabilities":[],"controls":["UC-SDLC-01","UC-SDLC-02","UC-SDLC-03","UC-SDLC-04","UC-SDLC-05"],"domains":["controls"],"lineOfDefense":"operate","mappingStatus":"mapped","releaseId":"sha256:d16e0b54cab2d44a965b8ae2f42d27154be57936cebb154987071598792b70ae","roleIntegrity":{"activityCount":0,"ermPhases":[],"lineRoles":[],"serviceModes":[],"warnings":[]},"sourceTemplateId":"workflow-library:controls-secure-sdlc-phase-gate-program","standards":["nist-800-53","iso-27001","cobit-2019","nist-csf-2"],"teams":["it"]},"id":"wf:C61","mapUrl":"https://assureswarm.com/controls/?v=1&node=wf%3AC61","slug":"controls-secure-sdlc-phase-gate-program","sourceIds":["aiuc-1","cobit-2019","eu-ai-act","iso-27001","nist-800-53","nist-csf-2","sox"],"sourceUrl":null,"title":"Secure SDLC Phase-Gate Program","type":"workflow"},"relationships":[{"expectedCatalogRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","id":"rel:715a57945aa72a2b45f0aa7218fe3496372c12ccbc997becdf17b236c50a41a3","properties":{},"sourceDetailPath":"/controls/data/v1/records/wf-c61-3da91ad5.json","sourceId":"wf:C61","targetDetailPath":"/controls/data/v1/records/uc-uc-sdlc-05-053afd62.json","targetId":"uc:UC-SDLC-05","type":"operates"},{"expectedCatalogRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","id":"rel:73e5eb104c34015f296fb63ac2bb2008560ecd65505cd3f79c671885506fe803","properties":{},"sourceDetailPath":"/controls/data/v1/records/wf-c61-3da91ad5.json","sourceId":"wf:C61","targetDetailPath":"/controls/data/v1/records/uc-uc-sdlc-04-ee9d76b1.json","targetId":"uc:UC-SDLC-04","type":"operates"},{"expectedCatalogRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","id":"rel:842d320169c78464c73b5c4c22faf3a988631ca04ad2c2c6d9c4f40eee4395af","properties":{},"sourceDetailPath":"/controls/data/v1/records/wf-c61-3da91ad5.json","sourceId":"wf:C61","targetDetailPath":"/controls/data/v1/records/uc-uc-sdlc-03-5de4daf8.json","targetId":"uc:UC-SDLC-03","type":"operates"},{"expectedCatalogRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","id":"rel:9aa966bdf4331a61eba1afa9b6417fa3df8ef15398b836d96f846a6cf9c8c62d","properties":{},"sourceDetailPath":"/controls/data/v1/records/wf-c61-3da91ad5.json","sourceId":"wf:C61","targetDetailPath":"/controls/data/v1/records/uc-uc-sdlc-02-c3b003c2.json","targetId":"uc:UC-SDLC-02","type":"operates"},{"expectedCatalogRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","id":"rel:df229cbae774092024579a9579007487113fd5017f9159cb45454c685dc346f6","properties":{},"sourceDetailPath":"/controls/data/v1/records/wf-c61-3da91ad5.json","sourceId":"wf:C61","targetDetailPath":"/controls/data/v1/records/uc-uc-sdlc-01-b3583fd1.json","targetId":"uc:UC-SDLC-01","type":"operates"}],"schemaVersion":1}