Security Questionnaire

Requirement 1: Confidentiality-Privacy

mandatory answer

Question 1

The website uses some technique or technology for the appropriate encryption/decryption of confidential information?

Requirement 2: Data integrity

mandatory answer

Question 2

The site utilizes some method or innovation that identifies and notifies any modification in either storage or on-transit data?

Requirement 3: Authentication-Non repudiation

mandatory answer

Question 3

The site utilizes some method or innovation ready to affirm the character of the sender and collector, and to tell this data?

Requirement 4: Authorization

mandatory answer

Question 4

The website uses some technique or technology able to ensure that the sender has the required authority to perform the operation?

Requirement 5: Auditing

mandatory answer

Question 5

The website uses some technique or technology able to notify who did what, when and where?

Requirement 6: Availability

mandatory answer

Question 6

The website uses some technique or technology able to deal with or mitigate DoS attacks?

Requirement 7: Intrusion detection

mandatory answer

Question 7

The website uses some technology to detect unauthorized users?

Requirement 8: Transparent security

mandatory answer

Question 8

UI includes elements to inform user about the security of the system in a gentle yet easy to understand manner?

Requirement 9: Cognitive burden

mandatory answer

Question 9

UI does not include “too many” configuration options, or password memorization?

Requirement 10: Trust decisions

mandatory answer

Question 10

The website design reduces the number of trust decisions that the user has to make?