What is the practice of integrating security into every SDLC phase called?

• A. Secure Coding Standards
• B. Secure Software Development Life Cycle (SSDLC)
• C. DevSecOps
• D. Security by Design

Answer: (B)

Integrating security into every SDLC phase is the Secure Software Development Life Cycle. It treats security as a fundamental part of the process, not something added at the end, with security activities embedded across all stages—from defining requirements and threat modeling to design, coding, testing, deployment, and ongoing maintenance. This ensures vulnerabilities are addressed as the product evolves, reducing risk early and continuously. While Secure Coding Standards provide important rules for writing safer code, they don’t cover the full lifecycle. Security by Design is a broad principle about building security in from the start, and DevSecOps focuses on embedding security into DevOps practices and automation. The SSDLC name specifically captures the idea of security being integrated throughout every SDLC phase.