Achieving legal and regulatory compliance with HP Application Security Center

HP Application Security Center helps you address legal and regulatory compliance for web applications and web services. HP Application Security Center relieves the burden of achieving legal and regulatory compliance for web applications through a combination of comprehensive application security assessments, customizable security policies and detailed compliance reporting designed for specific laws and regulations (see complete list below).

Get started

HP Application Security Center products run automated security checks against these requirements and produce reports tailored to each law and regulation’s language and categorization. These policies are customizable so you can develop your own tests in accordance with the laws and regulations to which they must adhere.

HP Application Security Center security testing products all include compliance support to help you:

• Assess and prove application security throughout the application lifecycle
• Use application security assessment policies for each regulation or customize them for your environment
• Produce security reports tailored to each regulation and categorized by the sections related to application security
• Using the HP SmartUpdate feature, stay up to date with changing regulations, compliance policies and reports

HP Application Security Center addresses the following legal and regulatory initiatives:

• 21CFR11
• Basel II
• California Online Privacy Protection Act
• California SB1386
• Canada Personal Information Protection and Electronic Documents Act (PIPEDA)
• Children's Online Privacy Protection Act (COPPA)
• EU Directive on Data Protection (Directive 1995/46/EC)
• EU Directive on Privacy and Electronic Communications (Directive 2002/58/EC)
• Director of Central Intelligence Directive 6/3 (DCID)
• Federal Information Security Management Act (FISMA)
• Gramm-Leach Bliley Act (GLBA)
• Health Insurance Portability & Accountability Act (HIPAA)
• ISO 17799
• Japan Personal Information Protection Act (JPIPA)
• NIST 800-53
• North America Electric Reliability Council (NERC)
• Open Web Application Security Project (OWASP) Top Ten
• Payment Card Industry (PCI) Data Security Standard (DSS)
• Safe Harbor
• Sarbanes-Oxley Act (SOX)
• U.K. Data Protection Act

Learn more