How to specify verification requirements in contracts

If you are specifying web application security verification requirements in contracts, you can use the OWASP ASVS to do so.

…

The author of this article can be reached at boberski_michael(at)bah.com

Good luck!