Security by Design
Drivesec support IoT system manufactures and their suppliers from the earliest stages of design, starting with the definition of requirements all the way to certification, by applying the principle of Security by Design.
This approach helps prevent costly disruptions and delays, ensuring that secure, resilient solutions reach the market efficiently and reliably.
How does Drivesec contribute concretely to the CI/CD process?
Drivesec can support and guide you in integrating the principle of Security by Design into every phase of the CI/CD process, offering modular solutions based on a wide range of services and on the Weseth® platform.
Plan
Cybersecurity Processes Design and Risk
- Compliance with Cyber Security Management System (CSMS) and Software Update Management System (SUMS)
- Item Definition
- Threat Analysis and Risk Assessment (TARA)
Architecture & Concept Development
- Requirements Engineering
- Cybersecurity Concept
- Cybersecurity Specification and Architectural Design
Code
Cybersecurity Design
- Security SW & HW Design
- Secure Coding and Design
- Secure Operating Systems and Configurations
Build
Test
Automated Vulnerability Assessment and Penetration Tests
- Vulnerability Scan & Assessment
- Functional Security Testing
- Automated Verification
- Penetration Testing
- Secure Operating Systems and Configurations
Release
Deploy
Continuous Automated Vulnerability Search
- Vulnerability Scan & Assessment
- Automated Verification
- Penetration Testing
Operate
Monitor
Continuous Monitoring
- Product Management
- Virtual Security Operations Center (VSOC)
- Incident Response Management
Plan
Cybersecurity Processes Design
and Risk Analysis
- Compliance with Cyber Security Management System (CSMS) and Software Update Management System (SUMS)
- Item Definition
- Threat Analysis and Risk Assessment (TARA)
Architecture
& Concept Development
- Requirements Engineering
- Cybersecurity Concept
- Cybersecurity Specification and Architectural Design
Code
Cybersecurity Design
- Security SW & HW Design
- Secure Coding and Design
- Secure Operating Systems and Configurations
Build
Test
- Vulnerability Scan & Assessment
- Functional Security Testing
- Automated Verification
- Penetration Testing
- Secure Operating Systems and Configurations
Deploy
- Vulnerability Scan & Assessment
- Automated Verification
- Penetration Testing
Operate
Monitor
- Product Management
- Virtual Security Operations Center (VSOC)
- Incident Response Management
