Further reading

• SAS Cloud Security Framework Audit Methods: https://www.sans.org/reading-room/whitepapers/cloud/cloud-security-framework-audit-methods-36922
• Securing Web Application Technologies Checklist: https://software-security.sans.org/resources/swat
• Application Server Security Requirements Guide: https://www.stigviewer.com/stig/application_server_security_requirements_guide/2018-01-08/
• Mozilla Checklist for Releases: https://wiki.mozilla.org/Releases/Checklist
• SANS Security Policies: https://www.sans.org/security-resources/policies/#template
• CWE/SANS Top 25 Most Dangerous Software Errors: http://cwe.mitre.org/top25/