UCF STIG Viewer Logo

DCSQ-1 Software Quality


Overview

Software quality requirements and validation methods that are focused on the minimization of flawed or malformed software that can negatively impact integrity or availability (e.g., buffer overruns) are specified for all software development initiatives.

MAC / CONF Impact Subject Area
MACI
MACII
MACIII
Medium Security Design and Configuration

Details

Threat
Poor software quality can introduce problematic behavior to DoD systems.  Degradation to integrity or availability can negatively impact mission success.  To promote software quality, strict requirements and validation methods must be established and followed.

Guidance
1. Components engaged in software development initiatives shall develop local procedures and checklists to insure software quality.
2. Formal software test methodologies shall be adhered to during all phases of product lifecycle.

References

  • CJCSI - Information Assurance (IA) and Computer Network Defense (CND)
  • IEEE 12207.0, Industry Implementation of International Standard ISO/IEC 12207: 1995 (ISO/IEC 12207)) Standard for Information Technology - Software Life Cycle Processes, 01 March 1998