June 17, 2008 – 6:00 am
–
On May 8, 2008, the OCC (Office of the Comptroller of the Currency, part of the U.S. Department of the Treasury) issued Bulletin 2008-16, which you can find here.
As the OCC states, there have been prior mentions of application security by the FFIEC (of which OCC is a member), NIST and others.…
The OCC and Application Security: Vindication at Last