OWASPASVS 5.0 requirement
ASVS-V2.3.5 High-value business logic flows require multi-user approval to prevent unauthorized or accidental actions.
- Standard
- OWASP ASVS 5.0
- Chapter
- V2 Validation and Business Logic
- Section
- V2.3 Business Logic Security
- Level
- L3 (requirement applies from this verification level up)
Requirement
Verify that high-value business logic flows require multi-user approval to prevent unauthorized or accidental actions. This could include but is not limited to large monetary transfers, contract approvals, access to classified information, or safety overrides in manufacturing.