Overview of RISC Zero Secure Software Development Life Cycle (S-SDLC)
RISC Zero employs a risk-based approach to security throughout the product and software development life-cycle. The process is driven by external critiques, escape analysis of production defects, industry frameworks (NIST SSDF, ISO 27002:2022, BSIMM 14, OWASP SAAAM), and a maturity framework called FACTORS (Friction, Automation, Coverage, Timing, Opportunity cost, Remediation maturity, and Security resilience).