Overview
SD Elements automates software security requirements based on a project’s technology, business and compliance drivers. It helps eliminate security vulnerabilities before scanning begins, identifies where to focus manual security testing, scales training through Just-in-Time Training, and integrates with development teams.
Quick start
-
What’s New in 2022.3?
-
SD Elements terminology is changing. The documentation will reflect these changes, as Problems will now be referred to as Weaknesses, and Tasks will now be referred to as Countermeasures.
-
Threats have been added to the threat model diagram. Threats are created per project based on Survey answers and match conditions and can consist of multiple Weaknesses and Countermeasures.
-
Use dashboards to visualize and organize Advanced Reports, including options to set a default homepage dashboard and to pin dashboards.
-
Mark Survey questions and subquestions as having required comments.
-
Countermeasure (Task) priority levels may change as SD Elements revises its content. These changes may affect your risk policies. Ensure that you review changes to your risk policies after accepting changes from new releases.
-
-
Team members:
-
Understand applications and projects.
-
Perform a search.
-
Sync tasks to another system using Issue Tracker integration.
-
Verify tasks with Scanner integration.
-
Track progress using project reports.
-
Update your account profile information.
-
-
Application administrators:
-
Authorize users and groups by assigning custom global and project roles.
-
Organize teams and applications into different business units.
-
Monitor risk across business units, applications and projects using Risk policies.
-
Generate organization and project reports.
-
Assign your projects with a level of risk with Project Classification.
-
Content administrators:
-
Tailor the project survey to match your organization’s needs.
-
Develop regulations to track compliance with custom standards and objectives.
-
Organize tasks into a custom set of phases.
-
Onboard projects quickly using project profiles.
-
Bring existing content into the application using import/export.
-
Use the Content Pack Selector to deactivate base content in SD Elements.
-
System administrators:
-
Learn about different authentication options.
-
Authorize users and groups by assigning custom global and project roles.
-
Facilitate integrations by configuring Issue Tracker connectors and System Verification connectors.
-
Use LDAP sync to automatically provision users & groups and assign them permissions.
-
Generate an API token and develop a custom integration.
-
Use Automations to automatically complete some processes.
-