SAMMY UI is optimized for resolutions with a width 1024px and higher.
Build Tooling Hardening
PW.6.2: Determine which compiler, interpreter, and build tool features should be used and how each should be configured, then implement and use the approved configurations.
  • Example 1: Enable compiler features that produce warnings for poorly secured code during the compilation process.
  • Example 2: Implement the “clean build” concept, where all compiler warnings are treated as errors and eliminated except those determined to be false positives or irrelevant.
  • Example 3: Perform all builds in a dedicated, highly controlled build environment.
  • Example 4: Enable compiler features that randomize or obfuscate execution characteristics, such as memory location usage, that would otherwise be predictable and thus potentially exploitable.
  • Example 5: Test to ensure that the features are working as expected and are not inadvertently causing any operational issues or other problems.
  • Example 6: Continuously verify that the approved configurations are being used.
  • Example 7: Make the approved tool configurations available as configuration-as- code so developers can readily use them.
CMMI Maturity
Not Applicable - Not applicable
Level 1: Initial - Unpredictable and reactive. Work gets completed but is often delayed and over budget.
Level 2: Managed - Managed on the project level. Projects are planned, performed, measured, and controlled.
Level 3: Defined - Proactive, rather than reactive. Organization-wide standards provide guidance across projects, programs, and portfolios.
Level 4: Quantitatively Managed - Measured and controlled. Organization is data-driven with quantitative performance improvement objectives that are predictable and align to meet the needs of internal and external stakeholders.
Level 5: Optimized - Stable and flexible. Organization is focused on continuous improvement and is built to pivot and respond to opportunity and change. The organization’s stability provides a platform for agility and innovation.
Description

Determine which compiler, interpreter, and build tool features should be used and how each should be configured, then implement and use the approved configurations.