Difference between revisions of "Category:OWASP Legal Project"

From OWASP
Jump to: navigation, search
Line 34: Line 34:
  
 
Proj_Documentation=  
 
Proj_Documentation=  
<br>
+
'''More About the Contract Annex'''
{{OWASP Book|4037498}}
+
 
<br>
+
<br>You can view the content in the wiki at [[OWASP_Secure_Software_Contract_Annex]]
+
<br>
+
<br>'''More About the Contract Annex'''
+
<br>
+
[[Image:Legal-handout.JPG|thumb|90px|left|Handout]]
+
 
* One Page Datasheet ([http://www.owasp.org/images/a/aa/Legal_One_Page_Handout.doc Word], [http://www.owasp.org/index.php/Image:Legal_One_Page_Handout.pdf PDF])  
 
* One Page Datasheet ([http://www.owasp.org/images/a/aa/Legal_One_Page_Handout.doc Word], [http://www.owasp.org/index.php/Image:Legal_One_Page_Handout.pdf PDF])  
 
 
 
 
 
 
 
 
 
 
 
 
 
   
 
   
 
'''Related projects'''
 
'''Related projects'''
  
[[Image:Owasp-projects-page.jpg|thumb|110px|left|Projects Page]]
 
 
* [http://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project OWASP Top Ten]
 
* [http://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project OWASP Top Ten]
 
* [http://www.owasp.org/index.php/Category:OWASP_Application_Security_Verification_Standard_Project OWASP ASVS Project]
 
* [http://www.owasp.org/index.php/Category:OWASP_Application_Security_Verification_Standard_Project OWASP ASVS Project]
 
* [http://www.owasp.org/index.php/Category:OWASP_Enterprise_Security_API OWASP ESAPI]
 
* [http://www.owasp.org/index.php/Category:OWASP_Enterprise_Security_API OWASP ESAPI]
  
+
====Contract Annex====
 +
'''Contract Annex'''
  
+
This document helps software developers and their clients negotiate and capture important contractual terms and conditions related to the security of the software to be developed or delivered.
+
  
<br>
+
'''Release Version'''
====Contract Annex====
+
* Contract Annex ([http://www.owasp.org/index.php/Image:OWASP_Secure_Software_Contract_Annex.doc Word], [http://www.owasp.org/index.php/OWASP_Secure_Software_Contract_Annex HTML])
'''OWASP Contract Annex - Release (This is the current official release version)'''
+
<br>
+
[[Image:Legal-book.JPG|thumb|90px|left|Release]]
+
Download free:
+
  
'''OWASP Contract Annex - Release'''
 
* [[Image:OWASP Secure Software Contract Annex.doc]]
 
 
<br>
 
<br>
'''Wiki Version'''
+
{{OWASP Book|4037498}}
* [[OWASP_Secure_Software_Contract_Annex]]
+
 
<br>
 
<br>
 
<br><br><br><br><br>
 
 
 
 
 
 
 
 
 
   
 
 
 
 
 
 
   
 
   
 
 
  |
 
  |
  
Line 101: Line 65:
 
* 11/30/2006 - OWASP Contract Annex [http://www.owasp.org/index.php/Image:OWASP_Secure_Software_Contract_Annex.doc Release version published].
 
* 11/30/2006 - OWASP Contract Annex [http://www.owasp.org/index.php/Image:OWASP_Secure_Software_Contract_Annex.doc Release version published].
  
<br>'''Mailing List'''<br>[https://lists.owasp.org/mailman/listinfo/owasp-legal Subscribe here]<br>[mailto:owasp-legal(at)lists.owasp.org Use here]
 
 
  |
 
  |
  
 
Proj_Related= [[Top Ten|OWASP Top Ten]] |
 
Proj_Related= [[Top Ten|OWASP Top Ten]] |
 +
Proj_Contributors=
 +
<table width="100%" valign="top"><tr><th width="25%"> </th><th> </th><th> </th></tr><tr valign="top"><td>
 +
'''Project Leader'''
 +
* [[:User:Jeff Williams|Jeff Williams]]
 +
'''Project Contributors'''
 +
* [http://www.owasp.org/index.php/User:Mike.boberski Mike Boberski]
  
Proj_Contributors= '''Project Leader'''<br>[[:User:Jeff Williams|Jeff Williams]]<br><br>'''Project Contributors'''<br>[http://www.owasp.org/index.php/User:Mike.boberski Mike Boberski]
+
</td><td>
  
 
+
'''Project Sponsorship'''
'''The OWASP Legal project is sponsored by:'''
+
  
 
[[Image:Aspect logo.jpg]]  
 
[[Image:Aspect logo.jpg]]  
 +
</td><td>
 +
'''Users and Adopters'''
  
 +
Coming soon! Please let us know how your organization is using the OWASP Contract Annex. Include your name, organization's name, and brief description of how you use the annex. The project lead can be reached at [mailto:jeff.williams@owasp.org Jeff Williams] Thanks for supporting OWASP!
  
'''Users and Adopters'''
+
</td></tr>
 
+
</table>
Coming soon! Please let us know how your organization is using the OWASP Contract Annex. Include your name, organization's name, and brief description of how you use the annex. The project lead can be reached at [[:User:Jeff Williams|Jeff Williams]] Thanks for supporting OWASP!
+
 
}}
 
}}
 
''This project licensed under the Licensed under [http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution ShareAlike 3.0].''  
 
''This project licensed under the Licensed under [http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution ShareAlike 3.0].''  

Revision as of 09:21, 6 May 2009

About

OWASP Documentation Project

Secure Software Development Contract Annex (Contract Annex)

The Secure Software Development Contract Annex developed by the OWASP Legal Project helps software developers and their clients negotiate and capture important contractual terms and conditions related to the security of the software to be developed or delivered. The goal of the Contract Annex is to ensure, at each stage of the life cycle, that appropriate attention has been paid to security.

For more information, please contact us.

How the Contract Annex Works

Here are two examples:

  • Implementation. Developer agrees to provide and follow a set of secure coding guidelines and to use a set of common security control programming interfaces (such as the OWASP ESAPI). Guidelines will indicate how code should be formatted, structured, and commented. Common security control programming interfaces will define how security controls must be called and how security controls shall function. All security-relevant code shall be thoroughly commented. Specific guidance on avoiding common security vulnerabilities shall be included. Also, all code shall be reviewed by at least one other Developer against the security requirements and coding guideline before it is considered ready for unit test.
  • Security Analysis and Testing. Developer will perform application security analysis and testing (also called "verification") according to the verification requirements of an agreed-upon standard (such as the OWASP ASVS). The Developer shall document verification findings according to the reporting requirements of the standard. The Developer shall provide the verification findings to Client.


Latest News

FAQ

More About the Contract Annex

Related projects

Contract Annex

Contract Annex

This document helps software developers and their clients negotiate and capture important contractual terms and conditions related to the security of the software to be developed or delivered.

Release Version


OWASP Books logo.png This project has produced a book that can be downloaded or purchased.
Feel free to browse the full catalog of available OWASP books.


News

Project News

Contributors/Users

Project Leader

Project Contributors

Project Sponsorship

Aspect logo.jpg

Users and Adopters

Coming soon! Please let us know how your organization is using the OWASP Contract Annex. Include your name, organization's name, and brief description of how you use the annex. The project lead can be reached at Jeff Williams Thanks for supporting OWASP!


This project licensed under the Licensed under Creative Commons Attribution ShareAlike 3.0.

Articles Below - More About the Contract Annex and Using It