Symantec Encryption Products Secure Development Lifecycle Best Practices

Products

• Desktop Email Encryption
• Drive Encryption
• Encryption Management Server
• Endpoint Encryption
• File Share Encryption
• Gateway Email Encryption
• PGP Command Line
• PGP Key Management Server
• PGP Key Mgmt Client Access and CLI API
• PGP SDK
• PGP Encryption Suite

Issue/Introduction

What are the Best Practices for Symantec Encryption Products and secure standards for its development/engineering lifecycles?

Resolution

For the Broadcom Secure Software Development Lifecycle (SSDLC), which applies to and adhered by Symantec Encryption products, see the following link:

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/ProductAdvisories/0/24577

Although the document linked above may be labeled as covering CA Technologies software, it applies to all Broadcom Software products, including those provided under the Symantec Enterprise brand such as Symantec Endpoint Encryption and PGP.

Additional Information

Section 508 Certification Needs
Symantec Encryption software can provide functionality such as audio cues and magnification/mouse at the Encryption Preboot screen for Section 508 assistive technology.
For more information on Section 508 certification, please reach out to Symantec Encryption Support for further guidance.
IMSFR-1062