security standards

[Svejk It <svejkit () gmail com>]

Hi,
If an organisation is looking to purchase or subscribe to a web
application service, are there any security standards it can request
the supplier to conform to? For example, it may like to have some
assurance that SQL injection is not possible. If so, are these
standards widely adopted?
Or, if there is not a widely adopted standard, is it reasonable to
request that the supplier state that it follows the Best Practice and
Guidelines of OWASP?
Thanks,
Svejk



This list is sponsored by Cenzic
--------------------------------------
Let Us Hack You. Before Hackers Do!
It's Finally Here - The Cenzic Website HealthCheck. FREE.
Request Yours Now! 
http://www.cenzic.com/2009HClaunch_Securityfocus
--------------------------------------