+APP.3.1.A9 Web Application and Web Service Procurement (S)

APP.3.1.A9 Web Application and Web Service Procurement (S)

In addition to the general aspects of software procurement, an organisation SHOULD, at minimum, consider the following when procuring web applications and web services:

  • Secure input validation and output encoding
  • Secure session management
  • Secure cryptographic procedures
  • Secure authentication procedures
  • Secure procedures for server-side storage of credentials
  • Appropriate access management
  • Sufficient logging capabilities
  • Regular security updates from the software developer
  • Protection mechanisms against widespread attacks on web applications and web services
  • Access to the source code of the web application or web service

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

Krav

3. Relaterede reguleringer

Reguleringer

Linkede sager

Sagslinks
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.28 Software Vulnerabilities or Errors