Software Security Code of Practice - Implementation Guidance

This guidance helps organisations that develop and/or sell software to understand how they can meet the principles in the Software Security Code of Practice, a systemic intervention by the UK government, designed to ensure that security is ‘baked into' software, rather than a costed extra.

For the purposes of demonstrating conformance with the principles in the Code of Practice, suggested approaches are expressed as outcome-related claims in the associated Assurance Principles and Claims (APC) document.

This implementation guidance is designed to help vendors develop solutions that will clearly support the evidencing of these claims, and thus demonstrate conformance with the Code of Practice.