Annex A 8.29 - Security Testing in Development and Acceptance

Security testing processes shall be defined and implemented in the development life cycle.