OWASPASVS 5.0 requirement
ASVS-V16.3.2 Failed authorization attempts are logged.
- Standard
- OWASP ASVS 5.0
- Chapter
- V16 Security Logging and Error Handling
- Section
- V16.3 Security Events
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that failed authorization attempts are logged. For L3, this must include logging all authorization decisions, including logging when sensitive data is accessed (without logging the sensitive data itself).