framework

DevSecOps Notional Reference Model

Reference model published by the NCCoE that organises DevSecOps into five functional dimensions, including a seven-phase lifecycle with control gates between phases, continuous feedback and a CI/CD pipeline layer.

Known aliases

notional reference model for DevSecOps

Relationships

No evidence-backed relationships are recorded.

Current clusters

build1 publisher

NCCoE's notional DevSecOps model gates every promotion between its seven phases

The NCCoE has decomposed SSDF practices into a seven-phase lifecycle in which each phase is a separate environment and no change advances without clearing a control gate. The mapping back to the SSDF itself is future work.

Publishers:pages.nist.gov

Reality

Evidence68
Adoption: Insufficient
Hype gap0
Incentives45
Confidence62