OWASP Top 10

All TPS developers are required to read and sign a statement saying that they understand the security issues raised in the OWASP Top 10 Web Application Security Vulnerabilities list.

Everyone on 440 development team, as well as anyone else who will be involved in development must read and make sure they understand the vulnerabilities on this list.

You can read about it on their website, which has a lot of links to resources that explain the vulnerabilities. There is also a PDF version available if you would like to download/print it.

If not properly secured, OnBoard can be vulnerable to all of the vulnerabilities on the list in some way or another so it is important that everyone read up on the issues and understand them.