+APP.3.1.A14 Protection of Confidential Data (B)

APP.3.1.A14 Protection of Confidential Data (B)

The IT Operation Department MUST ensure that access data for a web application or service is protected from unauthorised access on the server side using secure cryptographic algorithms. Salted hash methods MUST be used for this purpose.

The files containing the source code of a web application or service MUST be protected against unauthorised retrieval.

1. Resumen

1.1 Referencias

1.2 Requisitos identificados

1.3 Regulaciones relacionadas

2. Requisitos identificados

Requisitos

3. Regulaciones relacionadas

Regulaciones

Incidencias vinculadas

Vínculos
blocks G 0.19 Disclosure of Sensitive Information