Software security specifications

"[email protected]" <[email protected]> Mon, 21 Feb 2005 17:17:01 +0100

Newsgroups	gmane.comp.security.web-applications,gmane.comp.security.programming
Message-ID	<[email protected]>

I need to develop a policy that will list security requirements for
new applications developed internally or by contractors, general
specifications like validate input ecc...., I am looking for some good
resources on the subject, any recommendations?

Best Regards,

Shawn