Menu
NZTA open sources security tool for use by other agencies

NZTA open sources security tool for use by other agencies

The Security Development Lifecycle Tool aims to deliver "security by design"

Open source software tool will help embed security in government tech projects.

Open source software tool will help embed security in government tech projects.

Credit: Pstedrak | Dreamstime.com

The New Zealand Transport Agency is open sourcing a security assurance tool it is developing with Wellington company Catalyst.

Catalyst has been working with NZTA to open source the tool that automates aspects of the security assurance process and embeds security requirements earlier in the product development life-cycle.

The Security Development Lifecycle Tool (SDLT), aligns with common government security classifications and risk assessment practices to deliver "security by design" across the agency's tech teams.

NZTA opted to open source the tool so other government agencies can similarly reduce their compliance overheads and focus on core delivery.

The source code is available on NZTA's GitHub repository.

The SDLT uses a series of questions to determine the complexity of the end product and will generate additional questionnaires such as privacy impact assessments or cloud risk assessments to help teams assess and record their security requirements.

It handles information gathering, task creation, workflow-management and business approvals. The tool also integrates with workflow management systems such as Jira and provides an audit trail that ensures security assurance has been built into project delivery. 

It can be used to deliver or procure proof-of-concept products, software-as-a-service (SaaS) applications and to scope feature revisions or bug fixes.

The SDLT will enable NZTA to simplify the security assurance process, reduce spending on unnecessary third-party assessments and cut the product approval and delivery process from weeks to days.

Catalyst said it can install, host and support the SDLT for use by other organisations.


Follow Us

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Tags governmentopen sourceDevelopmentNew Zealand Transport AgencyNZTAsecurity by designsecurity development lifecycle tool

Events

Featured

Slideshows

Reseller News Exchange Auckland: Beyond the myths — how partners can master cloud security

Reseller News Exchange Auckland: Beyond the myths — how partners can master cloud security

This exclusive Reseller News Exchange event in Auckland explored the challenges facing the partner community on the cloud security frontier, as well as market trends, customer priorities and how the channel can capitalise on the opportunities available. In association with Arrow, Bitdefender, Exclusive Networks, Fortinet and Palo Alto Networks. Photos by Gino Demeer.

Reseller News Exchange Auckland: Beyond the myths — how partners can master cloud security
Reseller News welcomes industry figures at 2020 Hall of Fame lunch

Reseller News welcomes industry figures at 2020 Hall of Fame lunch

Reseller News welcomed 2019 inductees - Leanne Buer, Ross Jenkins and Terry Dunn - to the fourth running of the Reseller News Hall of Fame lunch, held at the French Cafe in Auckland. The inductees discussed the changing face of the IT channel ecosystem in New Zealand and what it means to be a Reseller News Hall of Fame inductee. Photos by Gino Demeer.

Reseller News welcomes industry figures at 2020 Hall of Fame lunch
Show Comments