...
The purpose of this policy is to define application security assessments within Alpha Serve. Application assessments are performed to identify potential or realised weaknesses as a result of inadvertent misconfiguration, weak authentication, insufficient error handling, sensitive information leakage, etc. Discovery and subsequent mitigation of these issues will limit the attack surface of Alpha Serve products and services, as well as satisfy compliance with any relevant policies in place.
All the processes and activities described in this Policy are targeted to prevent Alpha Serve’s applications from external threats that arrive from several paths to do harm to business or organisation.
Scope of the Policy
This policy covers all application security assessments for the purposes of maintaining the security posture, compliance, risk management, and change control of technologies in use at Alpha Serve.
...