RE: web app certification

["Michaels, Tod J." <tjmichaels () biofortis com>]

Eric,
One place to start looking might be the Software Engineering Institute and Carnegie Mellon.  They have a certification 
for engineering processes that probably speaks to some of your needs. It's not security oriented as much as 
quality/process oriented.

http://www.sei.cmu.edu/cmm/cmms/transition.html

Best,
Tod

__________________________________________________

Tod J. Michaels
Director, IT & Support Services
BioFortis Inc.
www.biofortis.com
410.327.4082 ext 1041
__________________________________________________
This communication is intended to be delivered only to the named addressee(s) and may contain information that is 
confidential, proprietary, and/or privileged. All contents including attachments are to be considered private and 
confidential, whether or not marked as such.
Dissemination, distribution, or copying of this communication, any of its contents, or any attachments is strictly 
prohibited without the express written permission of the author.
If received by anyone other than the named addressee(s), please notify sender of the error, and delete the original 
message and any copy of it. In no event shall this material be read, used, copied, reproduced, stored or retained by 
anyone other than the named addressee(s), except with the express consent of the sender.


-----Original Message-----
From: Eric Polerecky [mailto:EPolerecky () zipform com]
Sent: Tuesday, March 11, 2003 12:55 PM
To: 'webappsec () lists securityfocus com'
Subject: web app certification


Does anyone know if there any security/quality certification institution to
audit web applications and certify quality? I am looking for something like
ISO9000-series but for web applications. Feel free to contact me if you have
any questions or comments.


Eric C. Polerecky
http://www.zipform.com
Network Manager, RE FormsNet.
p. 1-586-790-8720 x258
e. eric () zipform com