+APP.3.1.A14 Protection of Confidential Data (B)

APP.3.1.A14 Protection of Confidential Data (B)

The IT Operation Department MUST ensure that access data for a web application or service is protected from unauthorised access on the server side using secure cryptographic algorithms. Salted hash methods MUST be used for this purpose.

The files containing the source code of a web application or service MUST be protected against unauthorised retrieval.

1. Panoramica

Titolo Standard

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

Requisiti
Fonte Requisito

3. Regolamentazioni correlate

Regolamentazioni
Fonte Regolamentazione

Ticket collegati

Collegamenti
Tipo di collegamento Ticket
blocks G 0.19 Disclosure of Sensitive Information