+APP.3.1.A22 Penetration Testing and Auditing (S)

APP.3.1.A22 Penetration Testing and Auditing (S)

Web applications and web services SHOULD be checked for security issues at regular intervals. In particular, audits SHOULD be performed regularly. The results SHOULD be documented transparently, protected adequately, and handled confidentially. Deviations SHOULD be investigated. The results SHOULD be presented to the CISO.

1. Επισκόπηση

1.1 Παραπομπές

1.2 Εντοπισμένες απαιτήσεις

1.3 Σχετικοί κανονισμοί

2. Εντοπισμένες απαιτήσεις

Απαιτήσεις

3. Σχετικοί κανονισμοί

Κανονισμοί

Συνδεδεμένα ζητήματα

Συνδέσεις
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.28 Software Vulnerabilities or Errors