+APP.3.2.A9 Defining a Web Server Security Policy (S)

APP.3.2.A9 Defining a Web Server Security Policy (S)

A security policy stating the required safeguards and responsibilities SHOULD be drawn up. An approach to obtaining information on current security vulnerabilities SHOULD also be defined. Furthermore, the manner in which security safeguards are to be implemented and the steps to be taken in the event of a security incident SHOULD be defined.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.27 Lack of Resources
blocks G 0.31 Incorrect Use or Administration of Devices and Systems