eGRACS Solution Development Controls Triangle
This Tactical Tier control triangle seeks to design, code, test, and implement custom information systems solutions based on business requirements, ensuring alignment with the organisation's specific design guidelines and quality standards.
This control rolls down from the Deliver Solution Domain and cascades into: 2.2.2.1-Solution Coding, 2.2.2.2-Solution Configuration, and 2.2.2.3-Solution Versioning controls.
Control Mappings:
Cobit:2019 ➡️ APO11; APO11.01; BAI03; BAI03.03; BAI03.12
PCI:DSSv4.01 ➡️ 6; 6.1; 6.1.1; 6.2; 6.2.1; 6.2.3; 6.2.3.1; 6.4.3
GDPR:2024 ➡️ Art.25
ISO38500:2024 ➡️ 6; 6.3
ITIL:v4 ➡️ GM1; TM34
CIS:v8 ➡️ Application Software Security; Establish and Maintain a Secure Application Development Process