Overview
SD Elements automates software security requirements based on a project’s technology, business and compliance drivers. It helps eliminate security vulnerabilities before scanning begins, identifies where to focus manual security testing, scales training through Just-in-Time Training, and integrates with development teams.
Quick start
-
What’s New in 2022.4?
-
SD Elements terminology has changed. Problems will now be referred to as Weaknesses, and Tasks will now be referred to as Countermeasures.
-
Threat Model Diagrams now support nesting zones and diagram notes. Nest zones to ensure that your diagram matches your organization’s architecture, and use diagram notes to represent your software application’s design and data flows, as well as any important notes to your threat model diagram.
-
Use contextual reporting to reduce the level of expertise needed to retrieve, combine, and visualize data as well as create rich reports.
-
Use connected components to publish a project as a reusable component for other projects to use.
-
The email address for SD Elements support is now sdesupport@securitycompass.com.
-
-
Team members:
-
Understand applications and projects.
-
Perform a search.
-
Sync tasks to another system using Issue Tracker integration.
-
Verify tasks with Scanner integration.
-
Track progress using project reports.
-
Update your account profile information.
-
-
Application administrators:
-
Authorize users and groups by assigning custom global and project roles.
-
Organize teams and applications into different business units.
-
Monitor risk across business units, applications and projects using Risk policies.
-
Generate organization and project reports.
-
Assign your projects with a level of risk with Project Classification.
-
Content administrators:
-
Tailor the project survey to match your organization’s needs.
-
Develop regulations to track compliance with custom standards and objectives.
-
Organize tasks into a custom set of phases.
-
Onboard projects quickly using project profiles.
-
Bring existing content into the application using import/export.
-
Use the Content Pack Selector to deactivate base content in SD Elements.
-
System administrators:
-
Learn about different authentication options.
-
Authorize users and groups by assigning custom global and project roles.
-
Facilitate integrations by configuring Issue Tracker connectors and System Verification connectors.
-
Use LDAP sync to automatically provision users & groups and assign them permissions.
-
Generate an API token and develop a custom integration.
-
Use Automations to automatically complete some processes.
-