Web application security policy
Course: AP® Cybersecurity Shows up in: Unit 5: Securing Applications and Data
A managerial control setting when web applications are assessed, how assessments are done, and timelines for fixing vulnerabilities by risk level.
Appears in the course and exam description (CED): 5.2.B.2
Why it matters in Unit 5
Turns application testing into a required, scheduled process.
Example
Critical vulnerabilities must be fixed within 7 days.
Learn it properly, with a checkpoint 5.2 Protecting Applications and Data: Managerial Controls and Access Controls