|
|
ENTMQCL-4093
|
|
New |
Andy Taylor
|
ENTMQCL-3948
T584: Implement update capabilities for your application
|
|
|
|
|
|
|
|
ENTMQCL-4035
|
|
New |
Andy Taylor
|
ENTMQCL-3948
T76: Do not hardcode passwords
|
|
|
|
|
|
|
|
ENTMQCL-4034
|
|
New |
Andy Taylor
|
ENTMQCL-3948
T1376: Provide and maintain guidance on secure installation, maintenance, and configuration of all software components
|
|
|
|
|
|
|
|
ENTMQCL-4033
|
|
New |
Andy Taylor
|
ENTMQCL-3948
T519: Test that input validation is done on all forms of input
|
|
|
|
|
|
|
|
ENTMQCL-4032
|
|
New |
Andy Taylor
|
ENTMQCL-3948
T2348: Perform code reviews
|
|
|
|
|
|
|
|
ENTMQCL-4031
|
|
New |
Andy Taylor
|
ENTMQCL-3948
T59: Use standard libraries for cryptography
|
|
|
|
|
|
|
|
ENTMQCL-4030
|
|
New |
Andy Taylor
|
ENTMQCL-3948
T159: Follow best practices for secure error and exception handling
|
|
|
|
|
|
|
|
ENTMQCL-4029
|
|
New |
Andy Taylor
|
ENTMQCL-3948
T379: Provide sufficient documentation for security-related features
|
|
|
|
|
|
|
|
ENTMQCL-4028
|
|
New |
Andy Taylor
|
ENTMQCL-3948
T2514: Establish coding and testing guidelines
|
|
|
|
|
|
|
|
ENTMQCL-4027
|
|
New |
Andy Taylor
|
ENTMQCL-3948
T14: Enforce the principle of least privilege
|
|
|
|
|
|
|
|
ENTMQCL-4026
|
|
New |
Andy Taylor
|
ENTMQCL-3948
T1385: Institute secure logging and event monitoring
|
|
|
|
|
|
|
|
ENTMQCL-4025
|
|
New |
Andy Taylor
|
ENTMQCL-3948
T2349: Configure software to have secure settings by default
|
|
|
|
|
|
|
|
ENTMQCL-4024
|
|
New |
Andy Taylor
|
ENTMQCL-3948
T1: Every offering should enforce or provide the option to enable multifactor authentication
|
|
|
|
|
|
|
|
ENTMQCL-4023
|
|
New |
Andy Taylor
|
ENTMQCL-3948
T60: Use correct and approved cryptographic algorithms, parameters, and key lengths
|
|
|
|
|
|
|
|
ENTMQCL-4022
|
|
New |
Andy Taylor
|
ENTMQCL-3948
T248: Protect secret keys and passwords in the application
|
|
|
|
|
|
|
|
ENTMQCL-3951
|
|
New |
Andy Taylor
|
ENTMQCL-3948
T279: Avoid dynamically loading any code without proper security considerations
|
|
|
|
|
|
|
|
ENTMQCL-3950
|
|
New |
Andy Taylor
|
ENTMQCL-3948
T186: Use recommended settings and the latest patches for third party libraries and software
|
|
|
|
|
|
|
|
ENTMQCL-3949
|
|
New |
Andy Taylor
|
ENTMQCL-3948
T189: Minimize the use of unmanaged (native) code
|
|
|
|
|
|