He maha ngā whakahaere e whakawhirinaki ana ki te ISO27001 hei hanga me te pupuri i ngā mahi whakawhanake pūmanawa haumaru. Tāpiritanga A o te standard e whakamārama ana i ngā mana whakahaere motuhake kua hangaia hei whakapakari i te Huringa Ora o te Whakawhanaketanga Pūmanawa (SDLC). E whakaatu ana tēnei tuhinga i te āwhina a Xygeni i ngā whakahaere ki te whakamahi i ēnei mana whakahaere me te whakaatu i te tutuki i ngā whakaritenga mai i te tirohanga Haumarutanga Taupānga (AppSec). Ka honoa hoki ngā taunakitanga arotake noa ki ngā āheinga o Xygeni, me te tohu i ngā wāhi e hiahiatia ana ētahi atu taputapu, tukanga rānei.
Tirohanga Whānui o ngā Mana Whakahaere Tāpiri A ISO27001 mō AppSec
E whakamārama ana te Tāpiritanga A o te ISO27001 i ngā mana whakahaere motuhake mō te whakawhanaketanga pūmanawa me te haumarutanga tono. Me whakauru e ēnei mana whakahaere ngā mahi haumarutanga puta noa i te huringa whanaketanga hei tiaki i ngā pūnaha mai i ngā ngoikoretanga me ngā tūmomo riri. Kei raro nei he whakarāpopototanga o ngā mana whakahaere Tāpiritanga A e tino pā ana ki te Haumarutanga Tono:
- A.8.25 Te Huringa Ora o te Whakawhanaketanga Haumaru (SDLC): Kia mau tonu te haumarutanga i ngā wāhanga katoa o te whakawhanaketanga pūmanawa, mai i te hoahoa tuatahi ki te tukunga.
- A.8.26 Ngā Whakaritenga Haumarutanga Taupānga: Te tautuhi mārama me te whakauru i ngā whakaritenga haumarutanga ki roto i ngā tukanga whakawhanake pūmanawa.
- A.8.27 Te Hanganga me te Hangarau Pūnaha Haumaru: Te whakatinana i te haumarutanga mā te hoahoa i roto i ngā mahi hoahoa me te pūnaha.
- A.8.28 Te Whakawaehere Haumaru: Te whakamahi i ngā aratohu waehere haumaru, me te tautuhi me te whakaiti i ngā mahi waehere kore haumaru.
- A.8.29 Te Whakamātautau me te Whakaae Haumarutanga: Whakahaerehia he whakamātautau haumarutanga puta noa i te whanaketanga, ā, i mua i te tukunga hei kimi me te whakatika i ngā ngoikoretanga i te wā tika.
- A.8.30 Te Whakawhanaketanga i Tukuna ki Waho: Tirotirohia me te whakahaere i ngā mōrearea haumarutanga ina mahi tahi ana me ngā tīma i tukuna ki waho, ngā kaiwhakawhanake tuatoru rānei.
- A.8.31 Te Wehenga o te Whakawhanaketanga, te Whakamātautau, me te Whakaputa: Wehewehea ngā mea rerekē SDLC ngā taiao hei tiaki i te pono o te pūnaha.
- A.8.32 Ngā Aratohu Whakawaehere Haumaru: Te whakawhanake i te waehere haumaru standardme te whakarite kia whakamahia tonutia e ngā tīma whakawhanake.
- A.8.33 Te Haumarutanga i roto i te Mekameka Tuku Pūmanawa: Whakahaerehia ngā mōrearea haumarutanga mō ngā wāhanga me ngā whakawhirinakitanga o te pūmanawa tuatoru.
- A.8.34 Mana Whakauru ki te Waehere Pūtake: Whakamahia te "Least Partibile" hei aukati i ngā panoni, i ngā turuturu rānei kāore i whakamanahia.
- A.8.35 Tukunga Haumaru o te Pūmanawa: Ko ngā putanga pūmanawa kua whakamātauhia, kua haumaru hoki ka tukuna ki te hanga.
- A.8.36 Te Haumarutanga Mōhiohio i te Wā Whakamātautau: Te tiaki i ngā raraunga tairongo i te wā e whakamātautau ana i ngā pūmanawa.
Te Mahere o ngā Mana Whakahaere ISO27001 ki ngā Āheinga Xygeni
| Mana Whakahaere Āpiti A ISO27001 | Whakaahuatanga | Tautoko Xygeni mō AppSec |
|---|---|---|
| A.8.25 Te Huringa Ora o te Whakawhanaketanga Haumaru (SDLC) | Whakatinana he hanganga SDLC, me te whakarite kia arohia te haumarutanga e ngā wāhanga katoa. | ✅ Kapinga katoa: SAST, SCA, Te Kitenga i ngā Mea Ngaro, Te Kitenga i ngā Āhuatanga Hē, IaC Security whakaurua puta noa SDLC. |
| A.8.26 Ngā Whakaritenga Haumarutanga Taupānga | Tautuhia me te whakauru i ngā whakaritenga haumarutanga ki roto i ngā taupānga. | ✅ Tautokona: SAST a IaC security ka whakamanahia e ngā matawai ngā whakaritenga haumarutanga; SBOM ka whakarite kia tutukihia e te hunga tuatoru. |
| A.8.27 Te Hanganga me te Hangarau Pūnaha Haumaru | Te whakamahi i ngā mātāpono haumarutanga i roto i te hoahoa me te hangarau pūnaha. | ✅ Tautokona: Ngā aratohu waehere haumaru mā roto i SAST, IaC te kimi i ngā hapa whirihoranga, me te Kimi i ngā Āhuatanga Kāore i te Tika hei whakamana i te hoahoa. |
| A.8.28 Te Whakawaehere Haumaru | Whakatinanahia ngā tikanga waehere haumaru, me te manatoko i te kounga o te waehere. | ✅ Tautokona: SAST Ka kitea wawe ngā mahi waehere me ngā ngoikoretanga kāore i te haumaru; ka tere ake te whakatika waehere haumaru mā te whakatika aunoa e te AI. |
| A.8.29 Te Whakamātautau me te Whakaae Haumarutanga | Whakahaerehia ngā whakamātautau haumarutanga i ngā wāhanga whakawhanake me ngā wāhanga whakaae. | ✅ Tautokona: integrated SAST, SCA, Te Matawai i ngā Mea Ngaro, Te Kite i ngā Pūmanawa Kino, me te Kite i ngā Āhuatanga Kāore i te Tika mō CI/CD pipelines. |
| A.8.30 Te Whakawhanaketanga i Tukuna ki Waho | Kia aro ki te haumarutanga i roto i ngā kirimana whakawhanaketanga ki waho me ngā kirimana a te hunga tuatoru. | ✅ Wāhanga: SCA manatoko i ngā wāhanga tuatoru; SBOM ā, ka tautoko a VDR i te tirohanga mōrearea a te hunga tuatoru engari ehara i te whakahaere kirimana. |
| A.8.31 Te Wehenga o te Whakawhanake, te Whakamātautau, me te Ngaio | Wehea ngā taiao whakawhanake, whakamātautau, me te whakaputa hei whakaiti i ngā mōrearea. | ❌ Kāore i te tika: He tukanga/kawenga ā-roto te wehenga taiao i waho o ngā taputapu AppSec. |
| A.8.32 Ngā Aratohu Whakawaehere Haumaru | Te tautuhi me te whakatinana i ngā aratohu waehere haumaru mō ngā tīma whakawhanake. | ✅ Tautokona: SAST ngā ture me te whakatinanatanga o ngā kaupapa here; Ka whakauruhia e te Kitenga Ngā Mea Hira ngā mahi pai rawa atu. |
| A.8.33 Haumarutanga i roto i te mekameka tuku pūmanawa | Tiakina ngā mekameka tuku pūmanawa mai i ngā ngoikoretanga me ngā waehere kino. | ✅ Kapinga katoa: SCA, Te Kitenga Pūmanawa Kino Moata, SBOM te whakaputa, te Parenga Ahiahi Whakawhirinakitanga, me te Kitenga i ngā Āhuatanga Kāore i te Tika. |
| A.8.34 Mana Whakauru Waehere Pūtake | Whakahaere me te whakawhāiti i te urunga ki ngā putunga waehere pūtake. | ✅ Wāhanga: Ka aroturukihia e te Kitenga Āhuatanga Kore ngā āhuatanga o te urunga ki te putunga raraunga, engari kei waho i te whānuitanga o te mana urunga katoa. |
| A.8.35 Tukunga Haumaru o te Pūmanawa | Me whakarite ko ngā pūmanawa anake kua whakawhanakehia me te whakamatautauria me te haumaru ka tukuna. | ✅ Tautokona: Hangaia te Pono ki guardrails te whakatinana i te tutuki i ngā kaupapa here; ko ngā āheinga aukati-whakaraerae aunoa me te wawahi-hanga ka ārai i ngā tukunga kore-haumaru. |
| A.8.36 Te Haumarutanga Mōhiohio i te Wā Whakamātautau | Tiakina ngā raraunga tairongo i te wā o ngā mahi whakamātautau. | ❌ Kāore i te tika: Kei waho o ngā āhuatanga Xygeni AppSec te huna i ngā raraunga tairongo i te wā whakamātautau. |
Ngā Taunakitanga Aromatawai Noa vs. Ngā Taunakitanga Tautoko-Xygeni mō te Haumarutanga Taupānga
| Mana Whakahaere Āpiti A ISO27001 | Ngā Taunakitanga Aromatawai Noa | Ngā Taunakitanga e Tautokona ana e Xygeni |
|---|---|---|
| A.8.25 Te Huringa Ora o te Whakawhanaketanga Haumaru (SDLC) |
|
|
| A.8.26 Ngā Whakaritenga Haumarutanga Taupānga |
|
|
| A.8.27 Te Hanganga me te Hangarau Pūnaha Haumaru |
|
|
| A.8.28 Te Whakawaehere Haumaru |
|
|
| A.8.29 Te Whakamātautau me te Whakaae Haumarutanga |
|
|
| A.8.30 Te Whakawhanaketanga i Tukuna ki Waho |
|
|
| A.8.31 Te Wehenga o te Whakawhanake, te Whakamātautau, me te Ngaio |
| ❌ Kāore i te tautokona: Me whai hanganga o waho me ngā taunakitanga tukanga. |
| A.8.32 Ngā Aratohu Whakawaehere Haumaru |
|
|
| A.8.33 Haumarutanga i roto i te mekameka tuku pūmanawa |
|
|
| A.8.34 Mana Whakauru Waehere Pūtake |
|
|
| A.8.35 Tukunga Haumaru o te Pūmanawa |
|
|
| A.8.36 Te Haumarutanga Mōhiohio i te Wā Whakamātautau |
| Tautoko Wāhanga: Te parenga ki te turuturu ngaro i roto i te waehere me te whirihoranga tono. Ka taea te whakarite i ngā taputapu kite mō ētahi atu mōhiohio. |
He Whakamārama Taipitopito mō ngā Āheinga Xygeni
Ka whakauruhia e te tūāpapa a Xygeni he huinga whānui o ngā āheinga Haumarutanga Taupānga e hono pū ana ki ngā mana whakahaere ISO27001 mō te haumaru. SDLC te whakatinanatanga, me te whakarite kia tutuki katoa ngā whakaritenga me te rangimarie o te hinengaro.
- Te Whakamātautau Haumarutanga Taupānga Pūmau (SAST): Ngā whakaurunga Xygeni SAST ki ngā rerengamahi whanaketanga hei kite wawe i ngā ngoikoretanga taumata-waehere. Mā tēnei huarahi matatau ka whakarite kia whai mana ngā kaiwhakawhanake, ka aro atu ki ngā mahi waehere kore haumaru i mua i te noho hei take nui.
- Tātaritanga Hanganga Pūmanawa (SCA): Mā te aroturuki tonu i ngā wāhanga tuwhera-pūtake ka kitea, ka whakaitihia hoki ngā ngoikoretanga me ngā mōrearea raihana, ka tautokona SBOM te whakaputa me te tutuki i ngā whakaritenga haumarutanga mekameka tuku.
- Te Kimi i ngā Mea Ngaro: Ka matawai aunoa a Xygeni i ngā putunga raraunga me pipelinehei ārai i te turuturu o ētahi momo mōhiohio tairongo pēnei i ngā kī API me ngā tohu tuakiri.
- Hanganga hei Waehere (IaC) Haumarutanga: Kimihia, ā, whakatikahia ngā hapa whirihoranga i te wā tōmua IaC ngā tauira pēnei i a Terraform, Kubernetes, me CloudFormation hei whakapakari i ngā hanganga mai i te tīmatanga.
- Kitenga Kohikohi: Kaupane CI/CD pipelineme ngā putunga raraunga i te wā tonu hei kite i ngā mahi whakapae, i ngā huringa kāore i whakamanahia rānei, kia pai ake ai te kitea o ngā tīma me te tiaki i te waehere pūtake.
- Te Whakatinanatanga Kaupapahere me te Guardrails: Whakamahia tika ngā kaupapa here haumarutanga i roto i te pipeline hei aukati aunoa, hei tohu rānei i ngā hanganga kāore e tutuki i te haumarutanga standards, e pupuri ana i ngā tukunga kia haumaru.
- Te Kitenga Pūmanawa Kino mō te Wā Wā: Hei ārai i ngā whakawhirinakitanga e takahia ana, matawaihia ngā wāhanga tuwhera-pūtake mō te pūmanawa kino i te wā tonu ka tāpirihia ki te kaupapa.
- SBOM me te Whakaputa VDR: Hanga aunoa i te Pire Rauemi Pūmanawa (SBOMs) me ngā Pūrongo Whakakitenga Whakaraerae (VDR) hei pupuri i te kitea me te whakahaere i ngā mōrearea a te hunga tuatoru.
- Ngā Awa Whakatakotoranga Matua: Whakaritea me te whakatau i ngā take haumarutanga i runga i te taea te toro atu me te taea te whakamahi, kia taea ai e ngā tīma te arotahi ki ngā mōrearea tino nui.
Ko ēnei āheinga, kua whakauruhia ki roto i CI/CD pipelineme ngā rerengamahi whanaketanga, ka whakarato i ngā taunakitanga me te whakapumautanga e hiahiatia ana e ngā whakahaere kia tutuki ai ngā whakaritenga ISO27001 AppSec.
Te Whakamutunga me nga Mahi Panuku
Xygeni ka āwhina i ngā whakahaere ki te whakatutuki i ngā whakaritenga ISO27001 mā te whakapakari i te haumarutanga i ia Huringa Ora Whakawhanake Pūmanawa (SDLC) atamira. Mā Xygeni, ka taea e ngā tīma te tautuhi, te whakatau i ngā kaupapa matua, me te whakatika i ngā mōrearea haumarutanga tono i mua i te piki haere.
Ngā Painga Matua o Xygeni mō te Whakatutukitanga ISO27001:
- Te whakamātautau haumarutanga me te whakahaere ngoikoretanga kua whakangawaritia i roto i SAST, SCA, me te Kimi i ngā Mea Huna.
- Te kitenga wawe i ngā mōrearea i roto i ngā whakawhirinakitanga pūtake tuwhera me te matawai i ngā pūmanawa kino me SBOM whakatupuranga.
- Te whakatinana kaupapa here aunoa hei aukati i ngā hanganga kāore e tutuki i ngā whakaritenga, kia haumaru ai ngā tukanga tuku.
- Te aroturuki tonu o CI/CD Taiao ki te kimi me te urupare ki ngā āhuatanga rerekē.
- Te tirohanga me te whai i te tirohanga pai ake mā roto i ngā rangitaki arotake taipitopito me ngā pūrongo haumarutanga.
- Te whakaurunga ki ngā rerengamahi whanaketanga o nāianei ka whakaiti i te whakararuraru, ā, ka whakatairanga i ngā mahi whakawhanake haumaru.
Ngā Taunakitanga mō te Tīmata, te Whakapai ake rānei i tētahi Kaupapa Whakatutukitanga AppSec me Xygeni:
- Aromatawai i te Paunga o Nāianei: Arotakehia tō haumaru SDLC ngā mahi me te tautuhi i ngā āputa e pā ana ki ngā mana whakahaere a te ISO27001 Annex A.
- Whakatakotoria a Xygeni puta noa i te SDLC: Whakauruhia te tūāpapa a Xygeni i te tīmatanga o te huringa whanaketanga hei whakanui ake i te kapinga haumarutanga me te āheinga ki te arotake.
- Tautuhia ngā Kaupapahere Haumarutanga: Whakatūria ngā kaupapa here haumarutanga mārama e hangai ana ki ngā mana whakahaere ISO27001, ā, whakamanahia mā te whakamahi i a Xygeni guardrails.
- Aroturuki me te Arotake: Mā ngā āheinga aroturuki me te kite i ngā hapa o Xygeni ka arotake tonu i te tūnga haumarutanga.
- Whakatakotoria ngā mea matua me te whakatika: Ka arotahi ngā huarahi whakatau kaupapa matua a Xygeni ki ngā mōrearea tino nui.
- Whakarite mō ngā Arotakenga: Kia mau tonu, kia arotakehia hoki ngā ara arotake i ia wā, SBOMme ngā pūrongo haumarutanga i hangaia e Xygeni hei whakaatu i te tutuki tonu o ngā whakaritenga.
