Skip to content

6. Product & Development

Status: Active
Owner: Devin
Managed by: Devin
Last Edited: 2026-02-14


Software development lifecycle, code repositories, secure development standards, API documentation, and stakeholder relationships.

Purpose: Development documentation supporting ISO 27001 certification, change management, code quality, and technical coordination.

Risk areas: Insecure code, inadequate change management, code repository compromise, insufficient documentation, stakeholder misalignment.

Business process relevance: ISO 27001 certification, incident response, technical partner integration, product roadmap execution, security audits.

Review triggers: ISO 27001 audits, security incidents, major releases, technology changes, stakeholder changes, FINMA guidance.

  • SDLC & Change Management
  • Code Repositories & Documentation
  • Secure Development Standards
  • API Documentation
  • Stakeholders