Auditing Your Applications

Now that we've discussed some of the basic concepts of application-level security, industry best practices, and potential “gotchas,” it's important to make sure that your applications are secure before deploying them to your users. To achieve this level of security, the IT organization should establish a security audit process for applications prior to deployment. This is important to do for in-house applications as well as third-party applications available either through the App Store or through external developers, which will be rolled out through the Enterprise deployment model.

In-House Applications

For internally developed applications, the audit is a little more straightforward because you have access to the source code. You should review the application functionality as well as the source code to make sure that blatant issues do not exist: