Interested in SD Elements? Contact our Sales Team for a demonstration. REQUEST A DEMO
SD Elements is a key component of our secure coding strategy. We are using it to drive compliance with industry best practices - with our own developers and third parties. Our application development teams have been able to benefit almost immediately, with a minimum of effort. We're customizing SD Elements to automate portions of our application certification and accreditation process. The SD Elements team has gone above and beyond to help us set that up.
After comparing the results of a 3rd party security application assessment against the security requirements laid out by SD Elements for that same application, we discovered that all of the application specific vulnerabilities would have been remediated had the developers simply followed those security requirements at the start.
It is upfront, action driven, telling people what to do instead of being reactive, it is proactive. Not only does it give a list of things that people need to be aware of, it gives them guidance on how to do it. It probably will help us with training requirements as far as PCI goes. So when they do annual training this will be just in time training.
We're struggling with annual training for PCI, the entire development organization has to be provided with training every year regardless of whether they need it or not. We're trying to get a definition around what that training definition is. This is one of those tools where we could show them (the auditors), as the developers are using SD Elements each of the different PCI requirements, how to do it, so the developers are actually getting trained every project they are working on.