← CIS Controls v8 in plain English

16.9 IG2

Control 16 / Application Software Security

Train Developers in Application Security Concepts and Secure Coding

Think of it likeTeaching your builders the best practices for constructing a safe and secure home.

In plain English

The family ensures that their developers are trained in secure coding and application security, just as they would teach builders the best practices for constructing a safe home.

Related CSF subcategories (unofficial mapping)

PR.AT-02: Individuals in specialized roles are provided with awareness and training so that they possess the knowledge and skills to perform relevant tasks with cybersecurity risks in mind.PR.PS-06: Secure software development practices are integrated, and their performance is monitored throughout the software development life cycle.