I have a client that recently completed a cyber in...
# suitescripts
steven.smith
03/14/2023, 9:44 PMI have a client that recently completed a cyber insurance application and got dinged for lack of security training for developers. I am curious if anyone knows of any security training that is more applicable to NetSuite development or anything you have taken and would recommend?
a
Anthony OConnor
03/14/2023, 9:52 PMnot aware of anything netsuite specific, but there's plenty of good practice training out there for devs, generally based on this stuff
Anthony OConnor
03/14/2023, 9:52 PMAnthony OConnor
03/14/2023, 9:53 PMfor NS specfic stuff I'd just think of correct usage of crypto modules, password fields, api credentials etc.
Anthony OConnor
03/14/2023, 9:54 PMif its just to check a box on an audit, i don't think it really matters, just some legit web dev security practices training would be fine I assume
c
creece
03/14/2023, 9:54 PMSuitelets that are available without login is typically frowned upon and probably abused the most along w/ just storing passwords in plain text
s
steven.smith
03/14/2023, 10:11 PMyeah, its pretty much just to check a box. In fact the client said in house created training would even be sufficient, but thought I would check for recommendations. Thanks for the feedback guys!