+APP.3.1.A9 Web Application and Web Service Procurement (S)

APP.3.1.A9 Web Application and Web Service Procurement (S)

In addition to the general aspects of software procurement, an organisation SHOULD, at minimum, consider the following when procuring web applications and web services:

  • Secure input validation and output encoding
  • Secure session management
  • Secure cryptographic procedures
  • Secure authentication procedures
  • Secure procedures for server-side storage of credentials
  • Appropriate access management
  • Sufficient logging capabilities
  • Regular security updates from the software developer
  • Protection mechanisms against widespread attacks on web applications and web services
  • Access to the source code of the web application or web service

1. Forbhreathnú

1.1 Tagairtí

1.2 Ceanglais aitheanta

1.3 Rialacháin ghaolmhara

2. Ceanglais aitheanta

Ceanglais

3. Rialacháin ghaolmhara

Rialacháin

Saincheisteanna nasctha

Naisc
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.28 Software Vulnerabilities or Errors