OWASPASVS 5.0 requirement
ASVS-V13.1.4 The application's documentation defines the secrets that are critical for the security of the application and a schedule for rotating them,…
- Standard
- OWASP ASVS 5.0
- Chapter
- V13 Configuration
- Section
- V13.1 Configuration Documentation
- Level
- L3 (requirement applies from this verification level up)
Requirement
Verify that the application's documentation defines the secrets that are critical for the security of the application and a schedule for rotating them, based on the organization's threat model and business requirements.