Architecture

Explore requirements for system and software design.

Authentication

Standards to ensure secure identity and access management.

Authorization

Requirements to enforce role-based and least-privilege access.

Certificates

Secure management of digital certificates and trust.

Credentials

Best practices for handling and protecting credentials.

Cryptography

Requirements for encryption, hashing, and key management.

Data

Standards to ensure secure data storage, transfer, and processing.

Devices

Controls for securing endpoints and connected devices.

Emails

Requirements for email security and phishing protection.

Files

Secure file storage, transfer, and access practices.

Legal

Requirements derived from legal and regulatory obligations.

Logs

Standards for log management, monitoring, and traceability.

Networks

Requirements for segmentation, firewalls, and secure communications.

Privacy

Requirements to ensure protection of personal and sensitive data.

Services

Standards to secure third-party and internal services.

Session

Requirements for session management and protection.

Social

Policies to mitigate risks in social engineering and external platforms.

Source

Standards for protecting source code integrity.

System

General requirements for OS, middleware, and infrastructure security.

Virtualization

Standards for securing VMs, hypervisors, and virtual environments.