Projects

A project tracks the tasks and best practices needed to secure an application release. Project tasks are identified based on the survey answers provided by a project user. Survey answers influence the risk profile of a project, prompting SD Elements to add compensating controls to a project’s task list. As a team completes tasks, a project’s underlying threats and problems are mitigated in the release.

The first project of an application is called a Root Project or Base Project. Subsequent projects are "Release Projects" because they are made using the "New Release" action.

Project details

A project has the following properties:

  • Profile: The project type defined at the time the project is created.

  • Name: A concise description of the project. For example, the version of the application release.

    		 Special characters in project names may be removed during slug creation. Use alphanumeric, underscore, and hyphen characters for creating unique project names.

  • Description: A way to detail the release to other users.

  • Risk policy: The policy outlining the set of tasks the project must complete to meet desired risk levels.

  • Custom attributes: (Optional) An additional set of attributes customized by an administrator. See Project attributes for more information.

  • Tags: Custom labels assigned to the project to help identify the release.

  • Members: The names of the users and groups in your system that have access to this project. Users and groups are assigned a different Project role to control their access rights.

  • Tasks Remaining: The number of tasks across all phases and priority groupings that are in an incomplete state.

A project is composed of the following main areas:

  • Project activity: A list of activities performed by users.

  • Project survey: Details about project scope that affect which tasks and requirements are included in a project. This includes technology, features, and dependencies.

  • Project tasks: The list of tasks and security requirements identified for the release.

  • Project reports: Reports that communicate the status of a project from the point of view of risk, completion, compliance, and so on.

  • ALM integration: Sync project tasks with bug tracking and ticketing systems.

  • verification integration: Import vulnerability and risk data from security tools to affect the verification and completion status of project tasks.

View a project

To view a project, follow the steps below.

Prerequisites:

  • The user:

    • Is a member of the project and has the permission Project Roles→Project Management→View Project OR

    • Is a member of the project’s business unit and has the permission Global Roles→Administration→View all projects.

Steps:

  1. Open the Business Units→All menu option.

  2. Select the business unit where the project’s application is assigned.

  3. Use search if you need to find the application in the list.

  4. Select the application where the project is assigned.

  5. Use search if you need to find the project in the list.

  6. Select the project.

The project’s task list loads.

Tag a project

Assign a custom tag to a project by following the steps below.

Prerequisites:

  • The user:

    • Is a member of the project and has the permission Project Roles→Project Management→Edit project details OR

    • Is a member of the project’s business unit and has the permission Global Roles→Administration→View all projects.

Steps:

  1. Navigate to the project’s application.

  2. Hover over the project, and it will display the tags widget.

  3. Enter one or more tags, and each tag will be added in sequence.

    • The widget auto-completes partially entered tags.

    • Ignore a suggestion by pressing the escape key.

The selected tags are assigned to the project. The tags can be used to filter projects in a list.

Create a new project

To create the first project of an application, follow the steps below:

Prerequisites:

  • The user is a member of the business unit.

  • The user has the permission Global Rules→Project Management→Add Project.

Steps:

  1. Open the Business Units→All menu option.

  2. Select the business unit where the application is assigned. The business unit’s list of applications loads.

  3. Use search if you need to find the application in the list.

  4. Select the application where the project should be assigned. The application’s list of projects loads.

  5. Click the plus add_circle button.

  6. The New Project dialog opens:

    • Enter the project details outlined above.

      project new.png

  7. Click Create.

Once the project is created, you will immediately be prompted to Select a profile and then answer the Project survey.

Select a profile

Follow the steps below to select a profile.

Steps:

  1. Choose a profile appropriate to the new project:

    • The settings can be changed or fine-tuned later.

    • Select No Profile to begin with an empty set of project settings.

      project profile.png

  2. Click Select and continue to project survey.

The project settings are reset according to the selected profile.

Create a release project

Release projects have the following advantages compared to a new project.

Advantages of a release project:

  1. No need to re-enter project settings: The new release keeps a record of the original project’s settings, removing the need to re-enter them again.

  2. Fewer requirements to action: Release projects identify only those tasks that need attention based on what has changed in the release.

  3. ALM and Scanner connections can be copied: Carry forward ALM and scanner integration settings, reducing the amount of duplicated setup.

  4. Carry forward tasks and their details: Task status and notes from the original project can be copied to the new release.

To create a release, follow the steps below:

Prerequisites:

  • The user:

    • Is a member of the project and has the permission Project Roles→Project Management→Add Project OR

    • Has the permission Global Roles→Administration→Edit all projects.

Steps:

  1. Open the Business Units→All menu option.

  2. Select the business unit where its application is assigned.

  3. Use search if you need to find the application in the list.

  4. Select the application where the original project is assigned.

  5. Use search if you need to find the project in the list.

  6. Hover over its row on the far right, click more_vert and select New Release. A dialog opens.

    project new release.png

  7. Enter details for the new project:

    • Name: A concise description of the project. For example, the version of the current application.

    • Description: A way to detail the release to other users.

    • Tags: Custom labels assigned to the project to help identify the release.

    • Advanced (optional):

      • Retain Statuses and Notes in the following Phases - Select the phases from which tasks, their statuses, and notes should be carried forward.

      • Project Specific Tasks Retention - Carry forward Project Specific Tasks to the new release.

      • ALM Connection Retention - Carry forward ALM connection details to the new release.

      • Verification Connection Retention - Carry forward scanner analysis connection details to the new release.

        project new release dialog2.png

  8. Click Create.

  9. The dialog Changes Since Last Release opens. Select the settings relevant to the release. Uncheck the settings that are irrelevant.

    project new release changes.png
    		Only uncheck a "Changes since last release" answer if you are certain there have been no changes. For example, uncheck "Changes to user output" only if you are certain that there will be no new web content on a web application. Unchecking answers incorrectly here may result in security tasks not appearing, potentially leading to decreased security in your application.

  10. Click Save and Close.

Move a project to another application

Move a project to a different application by following the steps below.

Prerequisites:

  • The user is a member of the project.

  • The user has the permissions:

    • Global role→Project Management→Delete project.

    • Global role→Project Management→Add project.

    • Project role→Project Management→View project.

Steps:

  1. Open the project’s overview page.

  2. Click the vertical ellipsis more_vert icon for more options.

  3. Select Move Project.

  4. A dialog appears. Search for the application to where the project should move.

    Project move

  5. Click Confirm.

The project is moved from the source application to the selected application.

Notes

  • If your project has new releases, all of them will be moved to the new application. There is no way to move a subset of them at this time.

  • The "Move" button will only be available to the "root" project, or the project that is not a "new release" of any other projects. If you do not see the "Move" button, it likely means that the project you have selected is a new release of another project.

Archive a project

To archive a project, follow the steps below:

Prerequisities:

  • Users require the permission Global Roles→Project Management→Add project.

Steps:

  1. Open the Business Units→All menu option.

  2. Select the business unit where its application is assigned.

  3. Use search if you need to find the application in the list.

  4. Select the application where the project is assigned.

  5. Use search if you need to find the project in the list.

  6. Hover over the project’s row on the far right, click more_vert and select Archive Project. A dialog opens.

  7. Confirm that you understand the impact of the change.

  8. Click Archive.

The project and its tasks are archived. The project can no longer be worked on. It can be unarchived later.

Unarchive a project

To unarchive a project, follow the steps below:

Prerequisities:

  • Users require the permission Global Roles→Project Management→Add project.

Steps:

  1. Open the Business Units→All menu option.

  2. Select the business unit where its application is assigned.

  3. Use search if you need to find the application in the list.

  4. Select the application where the project is assigned.

  5. Select Archived from the top menu under Business Units.

  6. Use search if you need to find the archived project in the list.

  7. Hover over the project’s row on the far right, click Unarchive. A dialog opens.

  8. Confirm that you understand the impact of the change.

  9. Click Unarchive.

The project and its tasks are restored to their original state and location.

Delete a project

To delete a project, follow the steps below:

 Deleting a project is permanent.
Prerequisities:

  • Users require the permission Global Roles→Project Management→Delete project.

Steps:

  1. Open the Business Units→All menu option.

  2. Select the business unit where its application is assigned.

  3. Use search if you need to find the application in the list.

  4. Select the application where the project is assigned.

  5. Use search if you need to find the project in the list.

  6. Hover over the project’s row on the far right, click more_vert and select Delete Project. A dialog opens.

  7. Confirm that you understand the impact of the change.

  8. Click Delete.

The project and its tasks are permanently removed from the system.

Apply a risk policy to a project

Apply a risk policy for new or existing project using the steps below.

Prerequisites

  • Users require one of the following permissions:

    • Global Roles → Administration → Add project.

    • Global Roles → Administration → Edit all projects.

    • Project Roles → Project Management → Edit project details.

Steps:

  1. Open the Business Units→All menu option.

  2. Select the business unit where the project’s application is assigned.

    1. Use search if you need to find the application in the list.

  3. Select the application where the project is assigned.

    1. Use search if you need to find the project in the list.

  4. On the right of the project whose policy you want to change, select more options.

  5. Click on Edit Project.

  6. Using the Risk Policy dropdown menu, select a risk policy.

  7. Click Done.

The risk policy you select will be applied to that project alone. The project’s list of tasks is updated to show tasks relevant to this risk policy.

results matching ""

    No results matching ""