|
Article 19
|
(System Development Life Cycle – Development and Testing Stage)
- The information and communication system shall implement necessary control measures with regard to safety requirements.
- The information and communication system shall take notice of and prevent common software flaws and implement necessary control measures.
- When an error occurs in the information and communication system, the user page only shows a short error message and code, excluding details of the error.
- It is advisable for an organization offering online ordering services to perform “source code scan” for purposes of safety testing of its core systems.
- It is advisable for the core systems of a type 1 organization to be equipped with an alert mechanism against serious errors.
- An organization offering online ordering services shall perform regular vulnerability scans of the information and communication system (at least on a biannual basis) for purposes of safety testing.
- An organization offering online ordering services shall perform regular penetration tests on the core systems which offer online services for purposes of safety testing.
|