ESAPI Assurance

Building an Assurance Case for ESAPI

 * consider adopting software facts label


 * identify third-party software


 * discuss coding practices that were followed, skill levels of developers, amount of independent review


 * publish scanning tool results


 * links to DHS web sites and documents