Application hosting platform
For your application hosting platform, consider the following possible requirements:
Databases encrypted?
Encryption keys managed by whom?
All data in-transit and at-rest encrypted?
All user access to the system via HTTPS?
All system-to-system interactions approved by your security operations team?
