The company’s internal work frame include a number of security controls in the Systems Development                              Life Cycle (SDLC), such as working according to guidelines from Open Web Application Security Project                              (OWASP - a non-profit organization that sets standards for safe development).