Evidence Flows

workflow

Secure SDLC Phase-Gate Program

Operate the secure SDLC phase-gate program as a modular, decision-aware workflow where the accountable control owner chairs the intake, requirements, design, and build/release gates end to end. Each recurring operating cycle runs as a new workflow instance attached to the existing secure-SDLC phase-gate Control item (domains = secure_development_sdlc; framework = nist-800-53 / iso-27001 / cobit-2019 / nist-csf-2) — that Control already exists in the library, so the instance enriches it with this cycle's gate evidence rather than creating a duplicate control. In scope: chairing those four security-integrated lifecycle gates for every development initiative due this cycle, remediating held or blocked initiatives, and monitoring the process itself; it is self-initiating and consumes no upstream workflow package, and it seeds its own next cycle. Out of scope and distinct from it: the independent SDLC gate review's release-milestone verification, and the release-security-gate's technical testing practice.

In catalog since 2026-09-17T22:28:00Z · Last changed 2026-10-04T21:48:26Z (791ff2dd3a45)

Record JSON · Open in map · Data retrieval guide

Catalog revision: 791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4. A connection does not establish full coverage.

Attributes

domain
controls
department
it
lineOfDefense
operate

Details

teams
  • it
domains
  • controls
standards
  • nist-800-53
  • iso-27001
  • cobit-2019
  • nist-csf-2
sourceTemplateId
workflow-library:controls-secure-sdlc-phase-gate-program
releaseId
sha256:03f26b6de99841801f9e1ea89f8e0aae1de6fdc3dfbafb66e4e9d22bdda9709b
canonicalUrl
https://evidenceflows.com/workflows/all/?w=controls-secure-sdlc-phase-gate-program
capabilities
    mappingStatus
    mapped
    lineOfDefense
    operate
    controls
    • UC-SDLC-01
    • UC-SDLC-02
    • UC-SDLC-03
    • UC-SDLC-04
    • UC-SDLC-05
    roleIntegrity
    activityCount
    0
    ermPhases
      lineRoles
        serviceModes
          warnings

            Source

            No record-specific source URL is provided.

            Download workflow template · Release: sha256:03f26b6de99841801f9e1ea89f8e0aae1de6fdc3dfbafb66e4e9d22bdda9709b

            Connections