This document discusses building compliance into the software development life cycle (SDLC). It covers pertinent regulations and legislation in various industries that affect companies, including Sarbanes-Oxley, Bill 198, Basel II, HIPPA and PIPEDA. The document outlines why compliance should be addressed in the SDLC, phase-specific activities, and pervasive activities to integrate compliance throughout the phases of development.

1. Security Solutions Training
Building Compliance
into the Software
Development Life Cycle
Rohit K. Sethi, CISSP
Manager, Security Compass
rohit@securitycompass.com

2. Agenda
• Pertinent Regulation Legislation
• Why we Should Address Compliance in the SDLC
• Phase-Specific Activities
• Pervasive Activities
© 2006 Security Compass
2