TIM8340 WK 2 Northcentral University Software Development Weekly Assistance Please see the attached documents for the details needed to complete this task.

TIM8340 WK 2 Northcentral University Software Development Weekly Assistance Please see the attached documents for the details needed to complete this task. For this Assignment 3 you will need to build off of the Week 2 Assignment that is attached. ***PLEASE ENSURE ALL REFERENCES ARE SCHOLARLY RESOURCES***
Instructions
For this assignment, you must build on your previous work by writing an essay that amplifies
SSDL practices and SSDL testing. Your earlier work will have provided an overview of these
areas as part of a broader review of current solutions and external influences from standards and
federal sources. This assignment represents a granular focus on these two areas.
Your essay should contain an introduction and a conclusion. The content should focus on the
development of a current system for secure software development and testing practices.
Remember to consider the signature assignment when completing your preparations for this
assignment. In addition, strive to determine a gap in our knowledge that would provide a
research opportunity.
Length: 6-8 pages, not including title and reference pages
References: Include a minimum of 8 scholarly resources
Your submitted assignment should demonstrate thoughtful consideration of the ideas and
concepts presented in the course and provide new thoughts and insights relating directly to this
topic. Your response should reflect scholarly writing and current APA standards.
***PLEASE ENSURE ALL REFERENCES ARE SCHOLARLY RESOURCES***
Software Development Standards and Laws
Review Federal and Defense Software Development Standards and Laws
1
Software Development Standards and Laws
2
Introduction
The systems development life cycle is an essential area of software development. In
this case, most of Apple’s products are software-based and requires the following another
critical set of requirements. The development cycle includes them software and hardware
aspects that a company may develop. Many configurations are done to boost the security of
the system, involved. Generally, any system, the development will include the planning,
analysis, design, implementation, and maintenance stages. Subsequently, this allows for the
unique development process that will give a sound output of the company. Each of the phases
must also comprehend the conventional ways of the company. In this case, it does not matter
which model a company uses. Buy it has to go hand in hand with the current laws, industrial
regulations, and standards. This paper will reflect on apples SDLC and the related legal
requirements and policies.
Company Overview
Apple is a multinational company that deals with the manufacture of computers,
smartphones, software, hardware, and other related computer peripherals. Apples were
founded in 1976 by Steve jobs together with Wozniak. The company grew from the
development of simple computing systems to the modern methods and products they have
today. Its principal projects include the mac book and the iPhone models today, and it has
headquartered in Cupertino. Currently, it is famous for its ability to create unique designs. For
instance, the iPhone is one of the unique smartphones in the world. The unique feature of the
Apples’ product leaves it has no comparison in the market. The company generated an income
of $265 billion in 2018, which shows a significant improvement trend in recent years with the
figure remaining its highest so far. So far, Apple continues to invest in research and design,
Software Development Standards and Laws
3
where it aims to improve the models (Linzmayer, 2014). Its current release came in midSeptember here they released a new iPhone 11 Pro model into the market which is an
improvement of the previous model. The company applies the agile method of system
development life cycle. In this case, it can create the project in different phases that come in
parts. Each stage is developed on its own and tested for the errors. After its completion, the
company progresses to the next round where it makes advancement to the subsequent age
development.
The SDLC relates to many laws and regulations that means that the company has to
create a good focus while formulating its SDLC. The systems developed means they will
include the entering of customer data in the system. Generally, very computing and
smartphone device that is developed will ask for specific information that makes it log in to
different systems. The systems security must be guaranteed to ensure that the resulting
product meets the security threshold. Generally, two main areas that must be addressed are the
design and implementation stages. Apple must ensure the security concerns of the systems
they create are guaranteed (Wong, Yu and Too, 2018). In this case, they need to ensure that the
implementation of the best privacy solutions and protection techniques are well addressed.
Therefore, this has to be reflected in all the phases of the development process. In building
the secure systems, the computing industry requires that the firms have to follow the right
principles of design that ensures privacy and security of the systems.
Moreover, it emphasizes the creation of the regulations that calls for and requires the
systems to have a certain level of
The company has many aspects that need the starts concerned with the software and
system development processes. In this case, Apple mainly continues with the improvement of
Software Development Standards and Laws
4
the hardware systems and software to make the products more efficient. In this case, the level
of competition calls for the continued improvements that ensure. However, in all its plans,
Apple must conform, with the right processes that will allow it to med the starts, policies,
regulations and laws set by various bodies (Wasserman, 2015). For instance, ISO, IEC, and
IEEE are some of the central bodies entrusted to create software and system standards. The
three bodies set standards that are acceptable globally. Thus, as a multinational organization,
the company must conform to the standards set by the three. The three bodies are recognized
by different laws in different countries across the globe. In this case, a company that does not
meet their requirements can face the law issues in regard and reflections of the set
requirements by the body.
The industry standards set on the ISO/IEC 15288 and ISO/IEC 12207 creates a vital
direction in the development of different phases. In this case, the policy requires any company
developing a system to take heed of the required consideration s in all development phas es.
The software development systems are required to follow individual paths when it comes to
the formulation of the recommended steps in the development of the systems.
ISO/IEC 15288
The ISO/IEC 15288 caters for the systems lifecycle development processes. In this
case, the policy considers the complexity that comes with the human-made s systems. In this
case, there are possibilities of challenges that are associated with the development process
(Arnold and Lawson, 2014). Thus, it is possible that a development process is not well
addressed in the case where issue s occurs, and the company chooses to ignore them.
Differences are inherent when developing the software, human-computer interfaces, and
hardware. The policy is also set to enforce harmony in the integration of the management,
Software Development Standards and Laws
5
science, engineering, and technology in the development of the systems. The policy,
therefore, sets the framework to have the processes for specific measures to ensure secure
systems at the end of the development. It, thus, sets to enforce the attention that focuses on the
achievement of the final product with the right characteristics that do not leave the system’s
users vulnerable to any security and privacy concerns. Moreover, the policy creates a guide
of how the processes should be aligned to ensure the best and standard results. All
development processes and plans must conform to the standards set.
Moreover, all systems developed are required to reflect the application of the selected se t of
processes in the development structure. Furthermore, the improvement of the SDLC needs to
follow the specific set standards and should not deviate from any form of compliance.
ISO/IEC 12207:2008
The ISO/IEC 12207:2008 works in collaboration with the ISO/IEC 15288:2008 to ensure
that the development of system software I complete. The two are major concerns of the Apples
continued SDLC plans that it must conform to in ensuring that it delivers the right products that
will not be against the requirements of the legal standards. The ISO/IEC 12207:2008 generally
focuses on the software lifecycle processes (Aydan et al., 2017). In this case, it establishes the
framework necessary for a company like Apple that majors in software development. It ensures
and enforces on the software life cycle process that will be vital as well as creating a specific
terminology that the firms need to rely on. The policy also ensures that the development process
took into regard then necessary measures in the development, creation and maintained of the
developed software. It also considers the ways of disposing of the software products, including
the firmware components. Moreover, the ISO/IEC 12207:2008 provides and directs in the
Software Development Standards and Laws
6
control and enhancement of the software lifecycle processes. Furthermore, it allows for the
company on the acquisitions.
The ISO/IEC 12207:2008 caters for the task planning, project assessment, and its control,
risk management, information and configuration management, and quality assurance. The
development process needs to conform to set the set starts as three final products are verified to
check whether the company adhered to hem. Any systems or software needs to meet the
requirements. Generally, Apple’s products, such as the computers and the smartphones, come as
a combination of the systems and the software that is built into that system. These products can
only be allowed into the market in the case where they meet the standards.
General Data Protection Regulation requires that the systems and software developed must
meet the requirements of the data needs of the regulation. In this case, the personal information
that is stored by a system must be protected by all means to ensure that the system users are
secured and their privacy maintained. It has understood that companies may bypass the starts to
ease their work leaving the users of their systems vulnerable to profound effects of the low
privacy level. The apple has consistently been one of the companies that work best in ensuring
the privacy of the users and their well-fitting nature while using the systems. Interestingly, the
requirements of the regulatory bodies come with high regar5d to the bend users remaining
protected. Therefore, every company needs to ensure that the SDLC process is well done to
meet all requirements of the regulation (Jung, Kim and Chung, 2014). To ensure that the privacy
concerns are addressed, the apple considers the enhancement of the following areas;
•
data transport with the associated security layers
•
database with the associated data architecture layers
•
application with the associated logic layers
Software Development Standards and Laws
•
7
Portal and presentation layers.
In this case, the given systems are expected to ensure that:
•
High level of data integrity is assured
•
Confidentiality and integrity concerned are taken care of and well maintained
•
The systems and software installed into the products such as the computers and laptops
must incorporate the data encryption capabilities in them
•
The systems have to ensure the anonymity of the data coming from the device to ensure
that intruders do not target the devices that send the data leading problems directed in
the users
•
The easy access that makes it possible for the security of Apple’s products to process data
whenever they need to do so efficiently
•
Allow for safe data storage in the systems
•
Have various design mechanisms that limit data bleaching into the systems.
The data protection implementation into the system developed is always ensured as a default
requirement
The Software Assurance Forum for Excellence in Code (SAFE code)
SAFE Code is an industry-standard formulated by companies such as Microsoft, Nokia, and Sap
that is concerned with the secure system development. The SAFE Code requires that the
organizations should follow the following guidelines as support mechanisms tom the standards,
regulations, and policies in SDLC (Dodson, Souppaya and Scarfone, 2019);
•
Requirements- testing and training insecure development of software to support the
security concern
•
Design-must be threat aware
Software Development Standards and Laws
•
8
Programming-apply the combination of the dynamic and static codes to allow for a more
responsive system to security demands
•
Testing- done with an external assessment on how strong it is to the possible threats.
•
Code integrity- focus on access principals such as the duties separation, least-privilege
access, and continued-persistent protection.
The Temptation to Non- Compliance
Compliance of a tedious act that makes the multinational to consider many factors while making
their developments. In this case, the software companies find it a real task to handle while trying
to comply with the laws that are set. Generally, regulatory compliance is easy when it comes to
small development as they are less involving.
Apple Efforts
With the agile development form of the SDLC, Apple has a more natural way to ensure
compliance with the set laws and standards. Generally, the agile method supports the
development of secure systems (Abrahamsson et at., 2017). First, it supports the excellent flow
of communication to continue throughout the project, which is a functional element in
developing secure systems. In this case, it allows for the creating of alarm in the case an issue
is discovered that may lead to a technical hitch. Hence, this makes it possible for the
development team to address the issues of concerns at the current stage it has discovered.
Thus, it does not lead to the affection of the whole system being vulnerable. However, the
company understands that any security issue at any stage can lead to a magnified effect on the
entire system; thus, it addresses it instantly.
The agile form of the SDLC allows Apple to make best practices in development
process possible. These practices include the application of the awareness programs,
Software Development Standards and Laws
9
application’s performance, the capture of all critical security requirements and implementation
of the best, and workable secure developments practices. Its secretive designs development
makes it possible to create secure systems that leave malicious individuals and organizations
having a hard time figure out their responsive attack mean to destroy. Working with such
unknown formulates makes it difficult for the malicious persons to launch attacks on the
Apple systems and software it also makes it possible for the creation of the vulnerability
remediation –procedures whereby, Apple is concerned in creating robust code, prioritize all
risks and fix them to ensure that the software developed is secure. Apple also creates and
monitors metrics and formulates operational guidelines in security support to conform to the
set of international security guidelines. The monitoring metrics can include increased means
to make the right testing to the software, and updates release to boost their security.
Conclusion
Apple is a multinational company that deals with the manufacture of computers,
smartphones, software, hardware, and other related computer peripherals. It is famous for its
ability to create unique designs. Generally, very computing and smartphone device that is
developed will ask for specific information that makes it log in to different systems. It needs
to ensure that the implementation of the best privacy solutions and protection techniques are
well addressed. The company has many aspects that require the starts concerned with the
software and system development processes. Apple mainly continues with the improvement
of the hardware systems and software to make the products more efficient.
Apple must conform, with the right processes that will allow it to med the starts,
policies, regulations set by ISO, IEC, and IEEE that offers direction in the development of
different phases. Moreover, all systems developed are required to reflect the application of
Software Development Standards and Laws
10
the selected set of processes in the development structure. The ISO/IEC 12207:2008 works in
collaboration with the ISO/IEC 15288:2008 to ensure that the development of system software is
complete. Apple’s continued SDLC plans that it must conform to in ensuring that it delivers the
right products that will not be against the requirements of the legal standards. It has understood
that companies may bypass the starts to ease their work leaving the users of their systems
vulnerable to profound effects of the low privacy level. With the agile development form of the
SDLC, Apple has a more natural way to ensure compliance with the set laws and standards.
Software Development Standards and Laws
11
References
Abrahamsson, P., Salo, O., Ronkainen, J., & Warsta, J. (2017). Agile software development
methods: Review and analysis. ArXiv preprint arXiv: 1709.08439.
Arnold, S., & Lawson, H. W. (2014). Viewing systems from a business management perspective:
The ISO/IEC 15288 standard. Systems engineering, 7(3), 229-242.
Aydan, U., Yilmaz, M., Clarke, P. M., & O’Connor, R. V. (2017). Teaching ISO/IEC 12207
software lifecycle processes: a serious game approach. Computer Standards & Interfaces,
54, 129-138.
Cheng, J., Goto, Y., Morimoto, S., & Horie, D. (2018). A security engineering environment
based on ISO/IEC standards: providing standard, formal, and consistent supports for
design, development, operation, and maintenance of secure information systems. In 2008
International Conference on Information Security and Assurance (isa 2008) (pp. 350354). IEEE.
Dodson, D., Souppaya, M., & Scarfone, K. (2019). Mitigating the Risk of Software
Vulnerabilities by Adopting a Secure Software Development Framework (SSDF) (Draft)
(pp. 23-23). National Institute of Standards and Technology.
Jung, H. W., Kim, S. G., & Chung, C. S. (2014). Measuring software product quality: A survey
of ISO/IEC 9126. IEEE Software, 21(5), 88-92.
Linzmayer, O. W. (2014). Apple confidential 2.0: The definitive history of the world’s most
colorful company. No starch press.
Wasserman, T. (2015). Software engineering issues for mobile application development.
Wong, W. Y., Yu, S. W., & Too, C. W. (2018). A Systematic Approach to Software Quality
Assurance: The Relationship of Project Activities within the Project Life Cycle and
Software Development Standards and Laws
12
System Development Life Cycle. In 2018 IEEE Conference on Systems, Process, and
Control (ICSPC) (pp. 123-128). IEEE.

Purchase answer to see full
attachment