Discovery activities

An overview of all activities you will need to do across the discovery phase.

Activities to start with

Considering security within the business case

Identifying security resources (Opens in new tab)

Agreeing roles and responsibilities (Opens in new tab)

Ongoing activities that must be carried out throughout the discovery phase:

Tracking Secure by Design progress

Activities to do next

Working out the project's security risk appetite (Opens in new tab)

Managing third-party product security risks (Opens in new tab)

Understanding cyber security obligations (Opens in new tab)

Understanding business objectives and user needs (Opens in new tab)

Activities to do later

Documenting service assets

Assessing the importance of service assets (Opens in new tab)

Sourcing a threat assessment (Opens in new tab)