How to secure the application?

Question

Information Security

Hi all. A question for people who have experienced this and can advise useful materials to read or know from personal experience!
What aspects should be considered when developing a web application in order to pass an information security audit?
Both generally accepted practices and specific actions to meet the requirements of an integrated information security system (CSIS) are of interest.
Thank you!

Answer 1

OWASP Web Application Security Testing Checklist
And generally accepted practices should be searched for each item separately.