Sigurni životni ciklus razvoja (SDLC) integrira sigurnost u svaku fazu razvoja softvera — od zahtjeva kroz dizajn, kodiranje, testiranje, implementaciju i održavanje — umjesto da je tretira kao naknadu. Воплощava "shift left" i "sigurnost po dizajnu."
Sigurnost kroz životni ciklus
Integrate security into EVERY phase (not just at the end):
REQUIREMENTS → define security requirements; consider compliance
DESIGN → THREAT MODELING; secure architecture; security review of the design
DEVELOPMENT → secure coding practices; code review; SAST in the IDE/CI
TESTING → security testing (SAST, DAST, dependency scanning, pen testing)
DEPLOYMENT → secure configuration; secrets management; hardening
MAINTENANCE → patching, monitoring, incident response, ongoing scanning
→ "shift left" — address security EARLY (cheaper than fixing after a breach).
