⬇️ Request of Assets PDF
In order to fully review the solution, the Assessment Team asks the Solution Vendor to provide the following assets in digital form:
- Product and architecture documents, diagrams, specifications
- Documentation in HTML, DOCX, PDF, TXT, etc
- User stories, personas, threat models, needs assessments, and other user experience and feature design inputs
- Documentation in HTML, DOCX, PDF, TXT, etc
- Source code for all tiers of the application
- Ideally, shared through access to source code management system (git repository, etc)
- Zip / Tarball also acceptable, but not ideal
- Access to ticketing systems, discussion boards, wikis, and other public development infrastructure
- Web link, login credentials
- Inputs to and results from any other security audits
- PDF files, contact information for auditor
- Prerequisites for installation, use, access
- PDF files, Web-based guide, README, etc
- Operational deployment images, tools, and/or scripts for configuration management
- Docker, Ansible, Terraform, install scripts, etc.
- Installation Guides (PDF Files, README txt)