A Security Practices Evaluation Framework
Domain
Description
Different risks are associated with different software domains. Web applications may be concerned with sustaining thousands, or possibly millions, of concurrent users supporting a variety of different languages. Whereas the primary concerns of a database project may be scalability and response time. The medical domain has unique security and/or privacy concerns.
Data Collection
Text description based on discussion with project staff, or read from project artifacts.