South Korea ISMS-P
2.8 Security in acquisition and development of information systems – South Korea ISMS-P

South Korea ISMS-P 2.8.2: Reviewing and testing security requirements

What does 2.8.2 require?

Tests confirm that security requirements defined at analysis and design were applied effectively; vulnerability checks confirm secure coding; problems found are fixed through improvement plans and follow-up; and public institutions carry out a privacy impact assessment through an assessment body at the analysis and design stage of new or changed personal information processing systems and reflect the result (PIPA Article 33).

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in 2.8 Security in acquisition and development of information systems – South Korea ISMS-P

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll South Korea ISMS-P controls