What are common software product compliance standards?

Question

This is a very general question about software products. I would like to know which compliance standards apply to any software product.

I know this question gives nothing. So, here is an example of what I'm talking about. CiSecurity Security Certification / Compliance lists the products they have verified to meet the standards published on their website, i.e. cisecurity.org. Compliance can be as simple as answering the questionnaire for your product and approved by a third party, such as cisecurity, or can be applied to your entire organization, such as PCI-DSS compliance.

I would be very interested to know which products you know / developed / created, follow. To give you the context behind this question: I am the developer of a data masking tool. The specified tool helps mask screen HTML text in a banking web application using filters. So, for example, if the user’s data is listed in the banking application using ssn, my product, when it is integrated with the banking product, automatically identifies the ssn template and disguises it in a predefined format. Therefore, I have a product marketing team that wants more buzz words like compliance to be able to sell it to more banking customers. Consequently, an understanding of “conformity that relates to products", is a key element of the study for me at this stage. By that I meant compliance with safety requirements.

Appreciate all your help and suggestions.

Answer 1

I do not believe that there is a specific governing body that dictates the specifications for your type of software. Some countries have their own privacy laws, and if you are in the USA, some states have their own laws, California is the most difficult.

, . - (, ). , , , Mirte, CWE (BugTraq - !). , , -, . , 100% , , .

, CWE-200 - . CWE-213, , . CWE-549 , . , CWE, . , CWE-549 .

Answer 2

, , , , , . , Vanguard Configuration Manager - , IBM System z. z/OS RACF (NCP) (NIST) (DHS).

. , , , , .