+APP.3.1.A9 Web Application and Web Service Procurement (S)

APP.3.1.A9 Web Application and Web Service Procurement (S)

In addition to the general aspects of software procurement, an organisation SHOULD, at minimum, consider the following when procuring web applications and web services:

  • Secure input validation and output encoding
  • Secure session management
  • Secure cryptographic procedures
  • Secure authentication procedures
  • Secure procedures for server-side storage of credentials
  • Appropriate access management
  • Sufficient logging capabilities
  • Regular security updates from the software developer
  • Protection mechanisms against widespread attacks on web applications and web services
  • Access to the source code of the web application or web service

1. Yleiskatsaus

1.1 Viittaukset

1.2 Tunnistetut vaatimukset

1.3 Liittyvät säädökset

2. Tunnistetut vaatimukset

Vaatimukset

3. Liittyvät säädökset

Säädökset

Linkitetyt tehtävät

Linkit
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.28 Software Vulnerabilities or Errors