645
May 21, 2020
KSATs
645 (NIST ID: T0118)
Task
Identify security issues around steady state operation and management of software and incorporate security measures that must be taken when a product reaches its end of life.
Items denoted by a * are CORE KSATs for every Work Role, while other CORE KSATs vary by Work Role.
Core KSAT for the following Work Roles
Secure Software Assessor (Core)
Analyzes the security of new or existing computer applications, software, or specialized utility programs and provides actionable results.
Additional KSAT for the following Work Roles
Software Developer (Additional)
Executes software planning, requirements, risk management, design, development, architecture, modeling, estimation, configuration management, quality, security, and tests using software development methodologies, architectural structures, viewpoints, styles, design decisions, and frameworks across all lifecycle phases.