Re: Software security specifications

[udayan pathak <udayan_pathak () yahoo com>]

Hi Shawn

Could you be a bit more specific about your question. 

The applications being developed are they big enough
to involve concepts of Enterprise architecture?

The policy you are trying to develop is that a high
level policy or a more hands-on lower level policy
specific to the apllication?


Udayan

--- "i.matilde () gmail com" <i.matilde () gmail com> wrote:

> I need to develop a policy that will list security
> requirements for
> new applications developed internally or by
> contractors, general
> specifications like validate input ecc...., I am
> looking for some good
> resources on the subject, any recommendations?
>
> Best Regards,
>
> Shawn


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com