CybersecurityStandard

OWASP ASVS

OWASP Application Security Verification Standard

The OWASP Application Security Verification Standard (ASVS) is an open standard for testing and verifying the security of web applications. It provides developers with a comprehensive list of requirements for secure development and helps establish confidence in application security.

Book your strategy call View source ↗

Overview

The OWASP ASVS aims to normalize the rigor and coverage of web application security verification through a commercially workable open standard. It specifies technical security controls to protect applications and their environments from vulnerabilities like Cross-Site Scripting (XSS) and SQL injection. ASVS requirements, categorized into chapters and sections, serve as a metric for assessing web application security, a guide for security control development, and a framework for specifying security requirements in procurement contracts. Version 5.0.0 includes updates to structure, requirements, and use cases, available in various formats such as CSV and JSON for easy reference.

Related in Cybersecurity

CybersecurityStandard

Cert NZ Top 10 Critical Controls — Cert New Zealand Top Ten Critical Controls

The CERT NZ Top Ten Critical Controls is a cybersecurity framework that outlines ten essential security controls organizations can implement to reduce cyber risk, improve resilience, and protect systems, data, and services from common cyber attacks.

National Cyber Security Centre (NCSC) • New Zealand • v2021

View details

CybersecurityStandard

Spain ENS — Spain - National Security Framework

The National Security Framework (ENS) is Spain's national cybersecurity framework that defines security principles and controls for public sector organizations and their suppliers to protect information systems and ensure the confidentiality, integrity, availability, authenticity, and traceability of digital services.

Government of Spain • Spain • v5 May 2022

View details

CybersecurityLaw

BDSG — Germany Federal Data Protection Act

The Federal Data Protection Act (BDSG) is Germany's national data protection law that complements the GDPR by establishing rules for personal data processing, privacy protection, regulatory oversight, and compliance obligations for public and private sector organizations.

v23 June 2021

View details

CybersecurityStandard

PPG 511 — Prudential Practice Guide 511 - Remuneration

Prudential Practice Guide (PPG) 511 - Remuneration is APRA guidance that helps regulated institutions design and manage remuneration arrangements that support prudent risk management, strong governance, and sustainable organisational performance.

Australian Prudential Regulation Authority (APRA) • Australia • v30 November 2009

View details

Ready to manage these frameworks?

6clicks maps regulations to controls, evidence and risks — automatically.

Book your strategy call