mission
- Itecor selected as Quality Assurance & Testing partner for a client's digital transformation project
- assessment of the newly developed applications for vulnerabilities
challenges
- identifying and addressing potential vulnerabilities
- ensuring cybersecurity became an integral part of the digital transformation journey
success catalysts
- utilising the application security testing tool, Qualys
- following Open Web Application Security Project (OWASP) guidelines to categorise the findings
- collaboration with the company’s IT and development teams to devise a strategy for addressing the vulnerabilities.
context
A digital transformation project was undertaken by one of our clients recently, where Itecor was the selected partner for Quality Assurance. Recognising the potential security risks inherent in this shift, the client agreed to an assessment of the newly developed applications for vulnerabilities.
solution
The team selected Qualys, a widely recognised application security testing solution, to assess the applications for vulnerabilities following the Open Web Application Security Project (OWASP) guidelines.
The tool was able to scan the applications, pinpointing vulnerabilities in the design, implementation, and deployment. The vulnerabilities were then categorised based on the OWASP Top Ten, highlighting the most critical web application security risks.
benefits & results
The findings ranged from common issues like access control to more complex security concerns such as weak design. The team could then assess the potential impact on the organisation and collaborate with the company’s IT and development teams to devise a strategy for addressing the vulnerabilities.
The recommendations included a holistic approach that encompassed process improvements, employee training, and ongoing monitoring. This approach ensured that cybersecurity became an integral part of the digital transformation journey.
More insights
how to guarantee the quality of testing services
quality assurance & testing
April 08, 2024
automated testing as part of modern software development
digital solutionsquality assurance & testing
April 08, 2024
migration and automation of a Selenium test suite to Tosca
quality assurance & testing
April 08, 2024
