Back to activities

Discovery activities

An overview of all activities you will need to do across the discovery phase.

Activities to start with

Considering security within the business case (Opens in new tab)

Identifying security resources (Opens in new tab)

Agreeing roles and responsibilities (Opens in new tab)

Ongoing activities that must be carried out throughout the discovery phase:

Tracking Secure by Design progress

Activities to do next

Working out the project's security risk appetite (Opens in new tab)

Managing third-party product security risks (Opens in new tab)

Understanding cyber security obligations (Opens in new tab)

Understanding business objectives and user needs (Opens in new tab)

Activities to do later

Documenting service assets (Opens in new tab)

Assessing the importance of service assets (Opens in new tab)

Sourcing a threat assessment (Opens in new tab)