Do you conduct application penetration tests of your cloud infrastructure regularly?

Related articles

• If requested, can you make the most recent Application Code Review or Penetration Testing Reports (carried out by independent third party) available?
• Are controls in place to prevent unauthorized access to your application, program, or object source code, and assure it is restricted to authorized personnel only?
• Are all identified security, contractual, and regulatory requirements for customer access contractually addressed and remediated prior to granting customers access to data, assets, and information systems?
• Describe the release management process you use?
• Do third-party agreements include provision for the security and protection of information and assets?