OWASPASVS 5.0 requirement
ASVS-V14.2.4 Controls around sensitive data related to encryption, integrity verification, retention, how the data is to be logged, access controls…
- Standard
- OWASP ASVS 5.0
- Chapter
- V14 Data Protection
- Section
- V14.2 General Data Protection
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that controls around sensitive data related to encryption, integrity verification, retention, how the data is to be logged, access controls around sensitive data in logs, privacy and privacy-enhancing technologies, are implemented as defined in the documentation for the specific data's protection level.