18.2: Ensure That Explicit Error Checking is Performed for All In-House Developed Software
CSF v1.1 References:
PF v1.0 References:
Threats Addressed:
The next version of the control set incorporates all or part of this control into: 16.10: Apply Secure Design Principles in Application Architectures.
Control Statement
For in-house developed software, ensure that explicit error checking is performed and documented for all input, including for size, data type, and acceptable ranges or formats.
[csf.tools Note: For more information on the Critical Security Controls, visit the Center for Internet Security.]