Rules These rules may be extended with organization-specific rules. However, the rules contained in a standard must be obeyed to claim compliance with the standard.
Training may be developed to educate software professionals regarding the appropriate application of secure coding standards. After passing an examination, these trained programmers may also be certified as secure coding professionals.
Once a secure coding standard has been established, tools can be developed or modified to determine compliance with the standard. One of the conditions for a coding practice to be considered a rule is that conformance can be verified. Verification can be performed manually or automated. Manual verification can be labour intensive and error prone. Tool verification is also problematic in that the ability of a static analysis tool to detect all violations of a rule must be proven for each product release, to detect regression errors. Even with these challenges, automated validation may be the only economically scalable solution to validate conformance with the coding standard.
Software analysis tools may be certified as being able to verify compliance with the secure coding standard. Compliant Compliant software systems may then be certified as compliant by a properly authorized certification body .Training may also be developed to educate software professionals regarding the appropriate application of secure coding standards. After passing an examination, these trained programmers may also be certified as secure coding professionalsby the application of certified tools.