{"id":31792,"date":"2023-09-23T04:07:49","date_gmt":"2023-09-23T04:07:49","guid":{"rendered":"https:\/\/www.process.st\/templates\/application-security-assessment-checklist\/"},"modified":"2024-03-05T14:11:31","modified_gmt":"2024-03-05T14:11:31","slug":"application-security-assessment-checklist","status":"publish","type":"post","link":"https:\/\/www.process.st\/templates\/application-security-assessment-checklist\/","title":{"rendered":"Application Security Assessment Checklist"},"content":{"rendered":"\n<section id=\"identify-applications-functionality-and-data-flow\"> \n <h2>Identify Application's Functionality and Data Flow<\/h2>\n <div class=\"text-content\">\n   This task involves identifying the functionality of the application and understanding how data flows within it. Determine the purpose of the application and how it interacts with users and external systems. Analyze the data flow to identify potential security vulnerabilities or weaknesses. This will provide a solid foundation for the subsequent assessment tasks. Some guiding questions: - What is the primary purpose of the application? - How does the application handle user input and process data? - Are there any data dependencies or interactions with external systems? Required resources: documentation or access to the application. \n <\/div> \n<\/section> \n<section id=\"determine-applications-technology-stack\"> \n <h2>Determine Application's Technology Stack<\/h2>\n <div class=\"text-content\">\n   In this task, you will determine the technology stack used by the application. Understanding the components and frameworks involved is crucial for identifying potential vulnerabilities and attack vectors. Describe the technology stack used by the application, including programming languages, frameworks, libraries, and databases. Identify specific versions and configurations. Required resources: documentation or access to the application. \n <\/div> \n <div class=\"text-field-content form-field-content\"> \n  <div class=\"form-group\"> <label> Programming Language <\/label> \n   <input type=\"text\" placeholder=\"Something will be typed here...\" disabled class=\"form-control\"> \n  <\/div> \n <\/div> \n <div class=\"text-field-content form-field-content\"> \n  <div class=\"form-group\"> <label> Framework <\/label> \n   <input type=\"text\" placeholder=\"Something will be typed here...\" disabled class=\"form-control\"> \n  <\/div> \n <\/div> \n <div class=\"text-field-content form-field-content\"> \n  <div class=\"form-group\"> <label> Library <\/label> \n   <input type=\"text\" placeholder=\"Something will be typed here...\" disabled class=\"form-control\"> \n  <\/div> \n <\/div> \n <div class=\"text-field-content form-field-content\"> \n  <div class=\"form-group\"> <label> Database <\/label> \n   <input type=\"text\" placeholder=\"Something will be typed here...\" disabled class=\"form-control\"> \n  <\/div> \n <\/div> \n <div class=\"text-field-content form-field-content\"> \n  <div class=\"form-group\"> <label> Version <\/label> \n   <input type=\"text\" placeholder=\"Something will be typed here...\" disabled class=\"form-control\"> \n  <\/div> \n <\/div> \n <div class=\"text-field-content form-field-content\"> \n  <div class=\"form-group\"> <label> Configuration <\/label> \n   <input type=\"text\" placeholder=\"Something will be typed here...\" disabled class=\"form-control\"> \n  <\/div> \n <\/div> \n<\/section> \n<section id=\"identify-potential-threats-and-attack-vectors\"> \n <h2>Identify Potential Threats and Attack Vectors<\/h2>\n <div class=\"text-content\">\n   Identifying potential threats and attack vectors is crucial for a comprehensive application security assessment. This task involves analyzing the application's functionality, technology stack, and potential risks to identify possible vulnerabilities. Describe potential threats and attack vectors that the application may be exposed to. Consider common vulnerabilities associated with the application's technology stack, user input, authentication mechanisms, data storage, and network communication. Required resources: knowledge of common application security threats and attack vectors. \n <\/div> \n <div class=\"textarea-field-content form-field-content\"> \n  <div class=\"form-group\"> <label> Potential Threats and Attack Vectors <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea> \n  <\/div> \n <\/div> \n<\/section> \n<section id=\"execute-automated-security-scanning-tools\"> \n <h2>Execute Automated Security Scanning Tools<\/h2>\n <div class=\"text-content\">\n   Automated security scanning tools can help identify common vulnerabilities and weaknesses in an application. In this task, you will execute automated scanning tools to discover potential security issues. Select and run suitable automated security scanning tools against the application. Examples include vulnerability scanners, penetration testing tools, and code analysis tools. Required resources: access to the application and appropriate security scanning tools. \n <\/div> \n <div class=\"select-field-content form-field-content\"> \n  <div class=\"form-group\"> <label> Scanning Tool <\/label> <select disabled class=\"form-control\"> <option value=\"An option will be selected here\">An option will be selected here<\/option> <\/select> \n  <\/div> \n  <ul class=\"items\"> \n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       1 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Burp Suite \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       2 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Nessus \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       3 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      OpenVAS \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       4 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Nikto \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       5 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      OWASP ZAP \n    <\/div> <\/li> \n  <\/ul> \n <\/div> \n<\/section> \n<section id=\"analyze-automated-scanning-results\"> \n <h2>Analyze Automated Scanning Results<\/h2>\n <div class=\"text-content\">\n   Analyzing automated scanning results is a critical step in identifying potential vulnerabilities and assessing their severity. In this task, you will review and interpret the output from the automated security scanning tools. Review the automated scanning results and identify potential vulnerabilities. Assess the severity of each vulnerability and prioritize them based on the potential impact. Required resources: automated scanning results. \n <\/div> \n <div class=\"file-field-content form-field-content\"> \n  <div class=\"form-group\"> <label> Scanning Results <\/label> \n   <div class=\"file-container\"> <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button> \n   <\/div> \n  <\/div> \n <\/div> \n<\/section> \n<section id=\"conduct-manual-security-testing\"> \n <h2>Conduct Manual Security Testing<\/h2>\n <div class=\"text-content\">\n   Manual security testing allows for a more in-depth analysis of an application's security controls and potential vulnerabilities. In this task, you will perform manual testing techniques to identify security weaknesses that may have been missed by automated scanning tools. Describe the manual security testing techniques to be executed. Consider techniques such as input validation, authentication bypass, session hijacking, and privilege escalation. Required resources: access to the application, testing environment, and appropriate tools. \n <\/div> \n <div class=\"textarea-field-content form-field-content\"> \n  <div class=\"form-group\"> <label> Manual Security Testing Techniques <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea> \n  <\/div> \n <\/div> \n<\/section> \n<section id=\"identification-and-evaluation-of-security-controls\"> \n <h2>Identification and Evaluation of Security Controls<\/h2>\n <div class=\"text-content\">\n   Identifying and evaluating the existing security controls within an application is crucial for understanding its overall security posture. In this task, you will review the application's security controls and assess their effectiveness. Describe the security controls implemented within the application. Assess their effectiveness in mitigating potential threats and vulnerabilities. Required resources: documentation or access to the application. \n <\/div> \n <div class=\"multi-select-content form-field-content\"> \n  <div class=\"form-group\"> <label> Security Controls <\/label> \n  <\/div> \n  <ul class=\"items\"> \n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       1 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      User authentication \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       2 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Input validation \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       3 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Access control \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       4 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Error handling \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       5 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Encryption \n    <\/div> <\/li> \n  <\/ul> \n <\/div> \n<\/section> \n<section id=\"testing-for-authentication-and-authorization-flaws\"> \n <h2>Testing for Authentication and Authorization Flaws<\/h2>\n <div class=\"text-content\">\n   Authentication and authorization are critical components of application security. In this task, you will evaluate the adequacy of the application's authentication mechanisms and authorization processes. Describe the testing techniques to be used for evaluating authentication and authorization. Consider factors such as password complexity, session management, role-based access control, and privilege escalation. Required resources: access to the application and appropriate testing tools. \n <\/div> \n <div class=\"textarea-field-content form-field-content\"> \n  <div class=\"form-group\"> <label> Authentication and Authorization Testing Techniques <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea> \n  <\/div> \n <\/div> \n<\/section> \n<section id=\"session-management-testing\"> \n <h2>Session Management Testing<\/h2>\n <div class=\"text-content\">\n   Session management is crucial for maintaining the security and integrity of user sessions. In this task, you will evaluate the application's session management mechanisms and identify potential vulnerabilities. Describe the testing techniques to be used for evaluating session management. Consider areas such as session hijacking, session fixation, session expiration, and secure session handling. Required resources: access to the application and appropriate testing tools. \n <\/div> \n <div class=\"textarea-field-content form-field-content\"> \n  <div class=\"form-group\"> <label> Session Management Testing Techniques <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea> \n  <\/div> \n <\/div> \n<\/section> \n<section id=\"testing-for-data-validation-issues\"> \n <h2>Testing for Data Validation Issues<\/h2>\n <div class=\"text-content\">\n   Data validation is vital for preventing various security vulnerabilities, such as injection attacks and data manipulation. In this task, you will evaluate the application's data validation mechanisms and identify potential vulnerabilities. Describe the testing techniques to be used for evaluating data validation. Consider areas such as input validation, output encoding, file upload validation, and SQL injection prevention. Required resources: access to the application and appropriate testing tools. \n <\/div> \n <div class=\"textarea-field-content form-field-content\"> \n  <div class=\"form-group\"> <label> Data Validation Testing Techniques <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea> \n  <\/div> \n <\/div> \n<\/section> \n<section id=\"business-logic-testing\"> \n <h2>Business Logic Testing<\/h2>\n <div class=\"text-content\">\n   Business logic flaws can lead to security vulnerabilities that are often unique to an application. In this task, you will evaluate the application's business logic and identify potential security risks. Describe the business logic testing techniques to be used. Consider areas such as access control checks, privilege escalation, sensitive data exposure, business process manipulation, and abuse of functionality. Required resources: knowledge of the application's business logic and access to the application. \n <\/div> \n <div class=\"textarea-field-content form-field-content\"> \n  <div class=\"form-group\"> <label> Business Logic Testing Techniques <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea> \n  <\/div> \n <\/div> \n<\/section> \n<section id=\"review-application-infrastructure-configuration\"> \n <h2>Review: Application Infrastructure Configuration<\/h2>\n <div class=\"text-content\">\n   An application's infrastructure configuration plays a significant role in its security. In this task, you will review the application's infrastructure configuration for potential vulnerabilities. Describe the components of the application's infrastructure that need to be reviewed. Consider areas such as network configuration, server hardening, database security, and firewall rules. Required resources: documentation or access to the application's infrastructure configuration. \n <\/div> \n <div class=\"textarea-field-content form-field-content\"> \n  <div class=\"form-group\"> <label> Infrastructure Components <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea> \n  <\/div> \n <\/div> \n<\/section> \n<section id=\"testing-for-cryptographic-strength\"> \n <h2>Testing for Cryptographic Strength<\/h2>\n <div class=\"text-content\">\n   Cryptographic vulnerabilities can lead to severe security breaches. In this task, you will evaluate the application's cryptographic mechanisms and assess their strength and effectiveness. Describe the testing techniques to be used for evaluating cryptographic strength. Consider areas such as encryption algorithms, key management, secure storage of sensitive data, and secure transmission of data. Required resources: access to the application and appropriate testing tools. \n <\/div> \n <div class=\"textarea-field-content form-field-content\"> \n  <div class=\"form-group\"> <label> Cryptographic Strength Testing Techniques <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea> \n  <\/div> \n <\/div> \n<\/section> \n<section id=\"code-review\"> \n <h2>Code Review<\/h2>\n <div class=\"text-content\">\n   Performing a code review is essential for identifying coding flaws and potential security vulnerabilities. In this task, you will review the application's source code for security-related issues. Describe the code review process to be followed. Consider areas such as input validation, secure coding practices, error handling, and data storage and retrieval. Required resources: access to the application's source code and appropriate code review tools. \n <\/div> \n <div class=\"textarea-field-content form-field-content\"> \n  <div class=\"form-group\"> <label> Code Review Process <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea> \n  <\/div> \n <\/div> \n<\/section> \n<section id=\"prepare-security-assessment-report\"> \n <h2>Prepare Security Assessment Report<\/h2>\n <div class=\"text-content\">\n   Preparing a comprehensive security assessment report is crucial for documenting the findings and recommendations of the assessment. In this task, you will compile a report summarizing the assessment results. Describe the format and structure of the security assessment report. Include sections for an executive summary, assessment findings, risk analysis, recommendations, and remediation steps. Required resources: assessment findings and recommendations. \n <\/div> \n <div class=\"textarea-field-content form-field-content\"> \n  <div class=\"form-group\"> <label> Report Format and Structure <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea> \n  <\/div> \n <\/div> \n<\/section> \n<section id=\"approval-security-assessment-report\"> \n <h2>Approval: Security Assessment Report<\/h2>\n <div class=\"approval-content\"> \n  <div class=\"header\"> \n   <div class=\"list-title\">\n    Will be submitted for approval:\n   <\/div> \n  <\/div> \n  <div class=\"approval-rule-subject-tasks-list\"> \n   <ul class=\"list\"> \n    <li> \n     <div class=\"approval-rule-subject-tasks-list-item\"> \n      <div class=\"item\"> \n       <div class=\"container\"> <span class=\"title\">Prepare Security Assessment Report<\/span> \n        <div class=\"body\">\n         Will be submitted\n        <\/div> \n       <\/div> \n      <\/div> \n     <\/div> <\/li> \n   <\/ul> \n  <\/div> \n <\/div> \n<\/section> \n<section id=\"prepare-remediation-recommendations\"> \n <h2>Prepare Remediation Recommendations<\/h2>\n <div class=\"text-content\">\n   After identifying security vulnerabilities, it is essential to provide recommendations for remediation. In this task, you will prepare a list of recommendations to address the identified vulnerabilities. Describe the remediation recommendations for each identified vulnerability. Consider best practices, industry standards, and the application's specific requirements. Required resources: assessment findings and knowledge of application security best practices. \n <\/div> \n <div class=\"textarea-field-content form-field-content\"> \n  <div class=\"form-group\"> <label> Remediation Recommendations <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea> \n  <\/div> \n <\/div> \n<\/section> \n<section id=\"present-findings-and-recommendations\"> \n <h2>Present Findings and Recommendations<\/h2>\n <div class=\"text-content\">\n   Presenting the assessment findings and recommendations to stakeholders is crucial for driving action and improving application security. In this task, you will summarize the assessment results and present them to the relevant stakeholders. Describe the presentation format and structure. Include a high-level overview of the assessment findings, the impact on the application's security, and the recommended remediation steps. Required resources: security assessment report and knowledge of the application. \n <\/div> \n <div class=\"members-field-content form-field-content\"> \n  <div class=\"form-group\"> <label> Stakeholders <\/label> <select disabled class=\"form-control\"> <option value=\"A member or group will be selected here\">A member or group will be selected here<\/option> <\/select> \n  <\/div> \n <\/div> \n <div class=\"send-rich-email-content form-field-content\"> <!-- No Recipients --> <!-- No Recipients --> <!-- No Recipients --> \n  <div class=\"form-group subject\"> <label>Subject<\/label> \n   <p class=\"form-control-static\"> Summary of Assessment Findings <\/p> \n  <\/div> \n  <div class=\"form-group body\"> <label>Body<\/label> <iframe srcdoc=\"<p>Dear {{form_Stakeholders}},<\/p><p>Please find attached the summary of the application security assessment findings and recommendations.<\/p><p>Best regards,\n{{user.fullName}}<\/p>\n<style>*{font-family:Inter,&quot;Segoe UI&quot;,&quot;Roboto&quot;,&quot;Oxygen&quot;,&quot;Ubuntu&quot;,&quot;Cantarell&quot;,&quot;Fira Sans&quot;,&quot;Droid Sans&quot;,&quot;Helvetica Neue&quot;,system-ui,sans-serif}<\/style>\n\" sandbox=\"\"><\/iframe> \n  <\/div> \n  <div class=\"form-group\"> <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-envelope btn-icon\"><\/i> Send <\/button> \n  <\/div> \n <\/div> \n<\/section>\n","protected":false},"excerpt":{"rendered":"<p>Identify Application's Functionality and Data Flow This task involves identifying the functionality of the application and understanding how data flows within it. Determine the purpose of the application and how it interacts with users and external systems. Analyze the data flow to identify potential security vulnerabilities or weaknesses. This will provide a solid foundation for [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"ep_exclude_from_search":false,"cover_icon_emoji":"\ud83d\udd12","cover_icon_url":"","tasks_count":"18","template_description":"","template_id":"hVPcKF4I2yslyo7kkUtGdQ","task_0":"Identify Application's Functionality and Data Flow","task_slug_0":"identify-applications-functionality-and-data-flow","task_1":"Determine Application's Technology Stack","task_slug_1":"determine-applications-technology-stack","task_2":"Identify Potential Threats and Attack Vectors","task_slug_2":"identify-potential-threats-and-attack-vectors","task_3":"Execute Automated Security Scanning Tools","task_slug_3":"execute-automated-security-scanning-tools","task_4":"Analyze Automated Scanning Results","task_slug_4":"analyze-automated-scanning-results","task_5":"Conduct Manual Security Testing","task_slug_5":"conduct-manual-security-testing","task_6":"Identification and Evaluation of Security Controls","task_slug_6":"identification-and-evaluation-of-security-controls","task_7":"Testing for Authentication and Authorization Flaws","task_slug_7":"testing-for-authentication-and-authorization-flaws","task_8":"Session Management Testing","task_slug_8":"session-management-testing","task_9":"Testing for Data Validation Issues","task_slug_9":"testing-for-data-validation-issues","task_10":"Business Logic Testing","task_slug_10":"business-logic-testing","task_11":"Review: Application Infrastructure Configuration","task_slug_11":"review-application-infrastructure-configuration","task_12":"Testing for Cryptographic Strength","task_slug_12":"testing-for-cryptographic-strength","task_13":"Code Review","task_slug_13":"code-review","task_14":"Prepare Security Assessment Report","task_slug_14":"prepare-security-assessment-report","task_15":"Approval: Security Assessment Report","task_slug_15":"approval-security-assessment-report","task_16":"Prepare Remediation Recommendations","task_slug_16":"prepare-remediation-recommendations","task_17":"Present Findings and Recommendations","task_slug_17":"present-findings-and-recommendations","task_18":"","task_slug_18":"","task_19":"","task_slug_19":"","task_20":"","task_slug_20":"","task_21":"","task_slug_21":"","task_22":"","task_slug_22":"","task_23":"","task_slug_23":"","task_24":"","task_slug_24":"","task_25":"","task_slug_25":"","task_26":"","task_slug_26":"","task_27":"","task_slug_27":"","task_28":"","task_slug_28":"","task_29":"","task_slug_29":"","task_30":"","task_slug_30":"","task_31":"","task_slug_31":"","task_32":"","task_slug_32":"","task_33":"","task_slug_33":"","task_34":"","task_slug_34":"","task_35":"","task_slug_35":"","task_36":"","task_slug_36":"","task_37":"","task_slug_37":"","task_38":"","task_slug_38":"","task_39":"","task_slug_39":"","task_40":"","task_slug_40":"","task_41":"","task_slug_41":"","task_42":"","task_slug_42":"","task_43":"","task_slug_43":"","task_44":"","task_slug_44":"","task_45":"","task_slug_45":"","task_46":"","task_slug_46":"","task_47":"","task_slug_47":"","task_48":"","task_slug_48":"","task_49":"","task_slug_49":"","task_50":"","task_slug_50":"","task_51":"","task_slug_51":"","task_52":"","task_slug_52":"","task_53":"","task_slug_53":"","task_54":"","task_slug_54":"","task_55":"","task_slug_55":"","task_56":"","task_slug_56":"","task_57":"","task_slug_57":"","task_58":"","task_slug_58":"","task_59":"","task_slug_59":"","task_60":"","task_slug_60":"","task_61":"","task_slug_61":"","task_62":"","task_slug_62":"","task_63":"","task_slug_63":"","task_64":"","task_slug_64":"","task_65":"","task_slug_65":"","task_66":"","task_slug_66":"","task_67":"","task_slug_67":"","task_68":"","task_slug_68":"","task_69":"","task_slug_69":"","task_70":"","task_slug_70":"","task_71":"","task_slug_71":"","task_72":"","task_slug_72":"","task_73":"","task_slug_73":"","task_74":"","task_slug_74":"","task_75":"","task_slug_75":"","task_76":"","task_slug_76":"","task_77":"","task_slug_77":"","task_78":"","task_slug_78":"","task_79":"","task_slug_79":"","task_80":"","task_slug_80":"","task_81":"","task_slug_81":"","task_82":"","task_slug_82":"","task_83":"","task_slug_83":"","task_84":"","task_slug_84":"","task_85":"","task_slug_85":"","task_86":"","task_slug_86":"","task_87":"","task_slug_87":"","task_88":"","task_slug_88":"","task_89":"","task_slug_89":"","task_90":"","task_slug_90":"","task_91":"","task_slug_91":"","task_92":"","task_slug_92":"","task_93":"","task_slug_93":"","task_94":"","task_slug_94":"","task_95":"","task_slug_95":"","task_96":"","task_slug_96":"","task_97":"","task_slug_97":"","task_98":"","task_slug_98":"","task_99":"","task_slug_99":"","footnotes":""},"categories":[76,57],"tags":[],"class_list":["post-31792","post","type-post","status-publish","format-standard","hentry","category-assessment","category-information-security"],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/posts\/31792","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/comments?post=31792"}],"version-history":[{"count":0,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/posts\/31792\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/media?parent=31792"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/categories?post=31792"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/tags?post=31792"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}