Application Penetration Testing & Web Security
- Internet-facing applications undergo annual penetration testing by an external firm.
- Public-facing applications are subject to vulnerability assessment and remediation.
- A web application firewall (WAF) / secure proxy protects public-facing applications.
Framework Alignment: NIST CSF ID.RA; CIS Control 18, 16; GDPR Art. 32; ISO 27001:2022 A.8.29, A.8.26