When talking about app security, the use of RAST tool, substitute any other security control, is a valuable add-on, or it is not valuable at all?

Applications & Platforms Infrastructure Security & GRC

81 views23 Upvotes5 Comments

Enterprise Security & Risk Management Architect in Insurance (except health), 10,001+ employees

By RAST are you referring to Regression or Risk? There are a couple of RASTs in this space.

1 1 Reply

IT Analyst in Finance (non-banking), 1,001 - 5,000 employees

I was referring to RASP.

IT Manager in Manufacturing, 1,001 - 5,000 employees

some valuable add on and some are not

IT Governance Consultant in Government, 1,001 - 5,000 employees

To clarify, it seems you are referring to RASP (Runtime Application Self-Protection) tools. RASP tools should be viewed as complementary to other security controls rather than replacements. Typically, they are integrated into the application during the development or deployment phases. The decision to use a RASP tool should be based on a thorough assessment of the application's specific requirements and risk profile.

1 1 Reply

IT Analyst in Finance (non-banking), 1,001 - 5,000 employees

thanks for the answer.

Content you might like

How are companies planning to change manage the roll-out of Data Loss Prevention (DLP)? We have programme of work to roll this out and would be interested in getting feedback on how other companies have successfully rolled it out, and any lessons learnt that they are happy to share.

Security & GRC

IT Manager in Transportation, 10,001+ employees

Always remember about Risk Assessment. Conduct a thorough risk assessment to identify potential data loss risks and vulnerabilities. Use this assessment to prioritize DLP efforts.

Where does the concept of Defense in Depth play into your org’s cybersecurity strategy? What are you doing practically to integrate that?

Security & GRC Security Strategy & Roadmap Risk Management +1 more

Director of IT in Education, 5,001 - 10,000 employees

This question requires a long explanation, but in a nutshell, implemented in the Risk Management Framework (NIST RMF). It is a layered protection in every step of the RMF.