Google Online Security Blog: Scalable vendor security reviews

Scalable vendor security reviews

7 март 2016 г.

Posted by Lukas Weichselbaum and Daniel Fabian, Google Security[Cross-posted on the Google Open Source Blog]https://github.com/google/vsaq

Web Application Security Questionnaire

Security & Privacy Program Questionnaire

Infrastructure Security Questionnaire

Physical & Data Center Security Questionnaire

All four base questionnaire templates can be readily extended with company-specific questions. Using the same questionnaire templates across companies may help to scale assessment efforts. Common templates can also minimize the burden on vendor companies, by facilitating the reuse of responses.
The VSAQ Framework comes with a simple client-side-only reference implementation that's suitable for self-assessments, for vendor security programs with a moderate throughput, and for just trying out the framework. For a high-throughput vendor security program, we recommend using the VSAQ Framework with a custom server-side component that fits your needs (the interface is quite simple).
Give VSAQ a try! A demo version of the VSAQ Framework is available here: https://vsaq-demo.withgoogle.com

Excerpt from Security and Privacy Programs Questionnaire
Let us know how VSAQ works for you: contact us. We look forward to getting your feedback and continuing to make vendor reviews scalable — and maybe even fun!

Няма коментари :

Публикуване на коментар

Security Blog

Scalable vendor security reviews

Няма коментари :

Етикети

Archive

Feed