Guidelines for Web Application Security Audit
Panel of IT Security Auditors
Circular issued by Information Technology Department