text: **6.2.1 Controlled environment**
  
  During development, all code is reviewed by two or more developers and passes through a 
  structured process within the development organization to ensure the integrity of the code. 
  The code is periodically scanned to ensure that no foreign code is included and to ensure that 
  safe programming techniques are applied. The following practices are applied: 
  
  (cid:2) Limited access: The source code is only accessible to the Content Management 
  OnDemand team. 
  
  (cid:2) Secure systems: The code is stored on secured systems behind the IBM firewall and can 
  only be accessed by the Content Management Development team. 
  
  (cid:2) Code reviews: All code modifications are reviewed by two or more developers on the team. 
  
  (cid:2) Separation of duties: Separate development, build, and test teams exist. 
  
  (cid:2) Redundancy: Two or more developers are familiar with each aspect (function and module) 
  of the code. 
  
  **6.2.2 Code scanning**
  
  The code is scanned three times, once at the beginning of the release or fix pack, once during 
  the middle of the development process, and the last time at the end of the development 
  process. Each time, three types of scans are performed: 
  
  (cid:2) Code scan: This type of scanning searches for code that is external to the Content 
  
  Manager OnDemand developed code. The goal is to ensure that no code is unknowingly 
  inserted into the source code and to verify that all of the external code that is used is 
  correctly licensed and will not result in any future legal action. 
  
  (cid:2) Appscan source: This type of scanning searches for “bad code”. It verifies that all variables 
  and pointers are correctly initialized, and that during the program operation, the values of 
  variables and pointers can be changed only through the “correct” code path and cannot be 
  altered by external sources. 
  
  (cid:2) Appscan Web: This penetration testing program is run against the common gateway 
  interface (CGI) code to identify any potential security flaws. 