Home >> Taxonomy >> Asvs 4.0.3 >> 01 architecture design and threat modeling >> 08 data protection and privacy architecture

Data Protection and Privacy Architecture

V1.8.1

Verify that all sensitive data is identified and classified into protection levels.

Level 1 required: False

Level 2 required: True

Level 3 required: True

CWE:

V1.8.2

Verify that all protection levels have an associated set of protection requirements, such as encryption requirements, integrity requirements, retention, privacy and other confidentiality requirements, and that these are applied in the architecture.

Level 1 required: False

Level 2 required: True

Level 3 required: True

CWE:

Disclaimer:

Credit via OWASP ASVS. For more information visit The OWASP ASVS Project or Github respository.. OWASP ASVS is under the Creative Commons Attribution-Share Alike v3.0 license.

View source on GitHub

Loading comments 0%