16.12: Implement Code-Level Security Checks

CSF v1.1 References:

PF v1.0 References:

Threats Addressed:


Info icon.

Control is new to this version of the control set and incorporates the following item from the previous version: 18.7: Apply Static and Dynamic Code Analysis Tools.

Control Statement

Apply static and dynamic analysis tools within the application life cycle to verify that secure coding practices are being followed.

[csf.tools Note: For more information on the Critical Security Controls, visit the Center for Internet Security.]