16.9—Train Developers in Application Security Concepts and Secure Coding
IG2
IG3
Users
Protect
>Control Description
Ensure that all software development personnel receive training in writing secure code for their specific development environment and responsibilities. Training can include general security principles and application security standard practices. Conduct training at least annually and design in a way to promote security within the development team, and build a culture of security among the developers.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.