Versione: 2.0
Ambito: Standard esterni e riferimenti autorevoli per le checklist.
| Standard | Descrizione | Link |
|---|---|---|
| OWASP ASVS | Application Security Verification Standard | https://owasp.org/www-project-application-security-verification-standard/ |
| OWASP Top 10 | Web Application Security Risks | https://owasp.org/www-project-top-ten/ |
| CWE | Common Weakness Enumeration | https://cwe.mitre.org/ |
| NIS2 | EU Cybersecurity Directive | https://eur-lex.europa.eu/eli/dir/2022/2555/oj |
| ISO 27001 | Information Security Management | https://www.iso.org/isoiec-27001-information-security.html |
| BSI IT-Grundschutz | German IT Security Standard | https://www.bsi.bund.de/grundschutz |
| BSI TR-03116-4 | Cryptographic Requirements | https://www.bsi.bund.de/TR03116 |
| NIST FIPS 140-3 | Cryptographic Module Validation | https://csrc.nist.gov/pubs/fips/140-3/final |
| DokuWiki Security | Plugin Security Guidelines | https://www.dokuwiki.org/devel:security |
Versione: 2.0
Autore: Wolfgang van der Stille