Topic

Software interaction with databases

Applicable to

Non Classified, Official, Protected, Secret, Top Secret

History

Priority

must

Mar 2025

All queries to databases from software are filtered for legitimate content and correct syntax.

The existing control recommending that all queries to databases from web applications are filtered for legitimate content and correct syntax was amended to expand its applicability from web applications to all applications.

2015

All queries to database systems from web applications must be filtered for legitimate contentand correct syntax.