Features/Compliance

From TempusServa wiki
Revision as of 19:36, 8 November 2024 by Kpe (talk | contribs) (Created page with "== Usage == TS NoCode platform is designed to make sure that systems built on can be compliant without any work that needs to be done * Security (ISO27k and ISAE) * EU law (GDPR etc) * Financial regulation == OWASP security == Depending on setup of the server OWASP level 1 or level 2 can be reached. This includes almost all security requirements such as * Mitigation of common threats (SQL injection, CSRF etc.) * Request throttling * Password reset procedures * Logging (...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search

Usage

TS NoCode platform is designed to make sure that systems built on can be compliant without any work that needs to be done

  • Security (ISO27k and ISAE)
  • EU law (GDPR etc)
  • Financial regulation

OWASP security

Depending on setup of the server OWASP level 1 or level 2 can be reached. This includes almost all security requirements such as

  • Mitigation of common threats (SQL injection, CSRF etc.)
  • Request throttling
  • Password reset procedures
  • Logging (see below)

GDPR support

Data can be marked up and coupled to autimatic deletion or anonoumization,

WCAG (disability) =

The UI supports the guidelines required for screenreaders to work.

Traceability

Applications can have the following logging

  • Acccess log
  • Action log (events and actions)
  • Revsion log (copy of all changes)

Additionally the user management can provide

  • Login history
  • History of former group membership

Finally all changes to an application are logged centrally