Criteria | Social | Knowledge Base

Social
Avoid exposing sensitive information
Summary The application must not expose sensitive information in sections that are publicly accessible. Description Some applications have sections such as web pages and endpoints that are publicly exposed or do not require an initiated session to be ...
Use alternative emails
Summary The employees must not use corporate emails to register accounts on social networks (even on +LinkedIn+). Description Corporate email addresses are valuable targets for phishing and social engineering attacks. Registering corporate email ...

Social