Milestone Security Development Lifecycle Overview

This document is a technical report detailing the Security Development Lifecycle (SDL) for Milestone Systems A/S. The SDL encompasses a comprehensive set of principles and practices that extend beyond software coding activities and technical aspects of products. It defines the requirements, practices, and procedures that Milestone employees follow during the development of all software products and services. The SDL aims to reduce the attack surface and safeguard against vulnerabilities while ensuring compliance with industry standards and regulatory requirements. The report outlines the implementation of SDL, which includes training for new employees and ongoing education for security champions within development teams. Additionally, it describes the review process for the SDL, which is updated yearly to reflect changes in industry standards and emerging threats. The document further elaborates on secure development principles, including secure by design, secure architecture, and secure by default, emphasizing the importance of integrating security into every phase of the software development lifecycle.