About the Policy Chap 01: Intro to IT Security Policy Chap 02: Risk Analysis for Information System Chap 03: IT Security Management Chap 04: Access Control Security Chap 05: Personnel Security Chap 06: Physical & Environmental Security Chap 07: Network Management Chap 08: Operations ManagementChap 9: Incident Management Chap 10: System Development and
Maintenance Chap 11: Compliance CIS Benchmarks Secured Application Coding Guidelines Secured Application Coding Guidelines
The Open Web Application Security Project (OWASP) is a not-for-profit worldwide organization focused on improving the security of application software. The aim of the Development Guide from OWASP is to allow businesses, developers, designers and solution architects to produce secure web applications. If done from the earliest stages, secure applications cost about the same to develop as insecure applications, but are far more cost effective in the long run. It provides practical guidance and includes J2EE, ASP.NET, and PHP code samples. The Development Guide covers an extensive array of application-level security issues, from SQL injection through modern concerns such as phishing, credit card handling, session fixation, cross-site request forgeries, compliance, and privacy issues.
Development Guide from OWASP can be accessed from http://www.owasp.org/index.php/OWASP_Guide_Project#tab=Downloads.
