A.14.1.2: Securing Application Services on Public Networks
Ensure that information involved in application services passing over public networks is protected from fraudulent activity, contract dispute, and unauthorized disclosure and modification.
A.14.1.1: Information Security Requirements Analysis and Specification
Ensure that information security requirements are included in the requirements for new information systems or enhancements to existing information systems.
A.12.3.1: Information Backup
Implement procedures to back up information and test them regularly.
A.12.1.4: Separation of Development, Testing, and Operational Environments
Implement separation of development, testing, and operational environments to reduce risks from unauthorized access or changes.
A.12.1.3: Capacity Management
Monitor, tune, and review capacity requirements to ensure continuous availability.
A.12.1.2: Change Management
Implement change management procedures to ensure that changes to information processing facilities and systems are controlled.