What is Security and Privacy by Design?
IBM defines Security and Privacy by Design (SPbD) as a streamlined and agile set of focused security and privacy practices. SPbD is aligned with the United States National Institute of Standards and Technology (NIST’s) Secure Software Development Framework (SSDF).
Security and Privacy by Design is made up of six (6) components:
- Threat model
- Privacy Assessment
- Vulnerability Management
- Secure Release Process
- Code Scan
- Penetration Test
Security and Privacy by Design reinforces IBM's commitment to security and privacy by embedding security and privacy into the design of IBM products and services including successful validation of Secure Release criteria prior to product ship.