Back to all 93 controls
Annex A 8.28
Technological
A.8.28 Secure coding
Code is written securely.
What good looks like
Coding standards, SAST in pipelines, peer reviews, dependency management.
Evidence an auditor will ask for
Coding guides, SAST reports, PR reviews.
Document template for this control
The Secure Development Policy template gives you auditor-ready wording that fulfils Annex A 8.28. Preview the full document before you download the editable version.