In the Generali Group, a guideline for secure software development applies to all national companies and Group companies throughout Europe. Depending on the criticality of an application, it defines the requirements that must be met with regard to data protection and IT security. This guideline was updated and expanded in 2023. The aim of the project was to implement the updates to the guideline for the life cycle of applications (development, release, operation and maintenance) as unbureaucratically as possible for the subsidiary CosmosDirekt. The software processes had to be adapted accordingly. In an initial project phase, the concept development, the IESE team analyzed the workflows in development, release and operation processes as well as their control with regard to the changes in the requirements. Specific tools such as checklists and templates were then adapted to the guideline and, where necessary, new elements were added in order to implement changes efficiently and effectively. A total of 65 so-called "controls", which define the requirements for secure software development, were added to or updated in the processes. The changes to the development processes were presented to the approximately 130 employees affected and a concept for converting existing applications to the new standard was communicated.
Fraunhofer Institute for Experimental Software Engineering IESE
