Click on a SCIP process for more information.Ī summary of the SCIP requirements for DHS Components are shown in Table 1. Figure 1 shows the three SCIP processes and the relationships between them. To comply with DHS Policy Directive 142-04, these three processes must be performed by each DHS Component. The inventory submission process involves the verification and submission of the final custom-code inventory documentation. Note that during the release process, new information about custom-developed code may be generated, requiring an update of metadata values defined during the inventory process. The release process involves the transition of inventoried custom-developed code for public open source release to a publicly available repository and comprises activities including identifying appropriate open source licensing and performing security analyses of custom-developed code. The inventory process involves identifying and recording all DHS custom-developed code and comprises activities including determining usage types and defining metadata values for custom-developed code. The SCIP comprises three main sub-processes: inventory, open source release and inventory submission.
0 kommentar(er)
