The objective of security testing is to ensure the overall application meets security requirements, industry standards, customer expectations, and regulatory controls. At an organizational level, it's suggested to have the following toolkits and knowledge ready in terms of release criteria, testing plan/cases, and automation testing toolkits:
- Security Release Criteria:
The release criteria define the minimum requirement of a quality release gate. They can help business stakeholders to reach consensus decisions about when to release the software. To have such a baseline ready will help to reduce lots of communication issues or arguments between the development, QA, and DevOps teams.
- Security Testing Plan/Cases:
The OWASP ...
