2.4.0

Added

Development Guidelines

• Architecture → Security → SHOULD conduct threat modelling when the security model of the software changes

Changed

Development Guidelines

• Architecture → Security → MUST run automated vulnerability for code {+and fix or mitigate the findings+}
• Architecture → Security → MUST restrict {+unnecessary+} access to [-development-] environments {+and endpoints+} from the open internet