Secure Development Policy

security expert said

Hi Dejan.

In ISO27002:2013 standard. in new control 14.2.1 (Secure Development Policy) :
1-What is the meaning of secure repositories?
2- What is the meaning of revision control in ""f) security in the version control""? Does it mean version of software that be developed?
3- Please explain how to consider security in software development life cycle?

Best Regards

Please give an example about secure repositories and revision control .

Here are the answers:
1) Repository is usually associated with software development and is a tool to archive a code that is developed; secure repository is the one where such code is protected - e.g. with encryption, access control, etc. - try to search Google and you'll find lots of examples.
2) Version control is related to software versions.
3) Security in software development life cycle - from ISO perspective, the best explanation is given in section 14.2 of ISO 27002:2013; for more than this you should get some books or attend a course.