App Defense Alliance Cloud Application Security Assessment (CASA)

Frequently Asked Questions (FAQs)

Click here to find quick answers to most commonly asked ADA CASA questions.

Who is an App Defense Alliance Framework User?

An App Defense Alliance Framework User refers to organizations like Google who participate in the alliance to enhance app security.

What is the role of the Framework User in the CASA assessment process?

The Framework User facilitates the assessment process, providing notifications, guidelines, and collaboration throughout the assessment journey.

What is the assessment notification?

The assessment notification is the official communication you receive from the App Defense Alliance Framework User (e.g., Google) informing you about the upcoming CASA assessment.

Can I start a CASA without notification from App Defense Alliance Framework User?

CASA assessments can be initiated in response to a notification from the App Defense Alliance Framework User. Alternatively, a Developer has the option to proactively conduct a self-initiated CASA assessment.

Are there any prerequisites to participate in the CASA assessment?

The prerequisites will be outlined by the Framework User; usually, participating apps should have a minimum level of maturity.

Can I request a custom assessment based on my application's unique features?

Custom assessments can be discussed with NetSentries to align with your application's intricacies while meeting Framework User requirements.

How can I schedule CASA assessment with NetSentries ?

You can coordinate with NetSentries to schedule the CASA assessment once you receive notification from the Framework User.

When will NetSentries start the assessment for our project?

The assessment's start date will be determined in coordination with NetSentries after you've received the notification.

What is the ETC for my CASA assessment?

The standard estimated time to complete a CASA assessment is 3-4 weeks, although a faster turnaround may be possible depending on the specific circumstances.

Should we test the application now, while it is still under development, or wait until it is rebuilt and migrated to the new infrastructure?

It's recommended to conduct the CASA assessment after the completion of the application's development to ensure all security issues are thoroughly addressed. This approach can be further discussed and coordinated with NetSentries.

I did my last year's ADA assessment with another authorized lab. Can I continue with NetSentries for revalidation assessment this year?

Yes, you can continue with NetSentries for revalidation assessment.

Can I request an extension for the assessment timeline?

Depending on the circumstances, you may discuss the possibility timeline extension with framework user, considering the framework user's requirements.

What should we do if our application undergoes significant updates during assessment?

Notify NetSentries immediately so they can adjust the assessment strategy accordingly and ensure comprehensive coverage.

How will my sensitive data be handled during and after the assessment?

NetSentries follows strict security protocols to handle sensitive data, ensuring confidentiality during and after the assessment.

How does NetSentries ensure confidentiality during the assessment?

NetSentries follows strict confidentiality protocols, safeguarding your data and information throughout the assessment process.

How are the assessment findings communicated to our team?

NetSentries provides a comprehensive report detailing vulnerabilities, their severity, and recommendations to remediate.

Can I appeal the assessment results if I disagree with them?

If you disagree with assessment results, you can discuss your concerns with NetSentries, providing additional context for resolution.

Can NetSentries provide guidance for addressing assessment findings?

Absolutely, NetSentries offers detailed remediation advice to help your development team effectively address the identified vulnerabilities.

What happens if vulnerabilities are discovered during revalidation?

NetSentries helps address newly discovered vulnerabilities, ensuring your application remains secure and compliant after updates.

What is the significance of a Letter of Validation (LoV)?

The LoV signifies successful completion of the CASA assessment, validating your application's security and commitment to excellence.

How long is the Letter of Validation (LoV) valid?

The validity period of the LoV will be mentioned in the documentation provided by the Framework User and can vary depending on the context.

What is an annual revalidation?

An annual revalidation involves re-assessing your application's security on a yearly basis to ensure its ongoing safety.

Can I engage with NetSentries for ongoing security support after the assessment?

Yes, NetSentries offers post-assessment support services to help you maintain and enhance your application's security posture.

How often should I undergo CASA assessments for optimal security?

Annual CASA assessments are mandated to ensure continuous security improvements and to stay aligned with industry trends.

How does CASA align with industry standards and best practices?

CASA aligns with industry-leading security standards (OWASP ASVS), bolstering your application's security posture to meet global expectations. CASA assessments collectively enhance app security, fostering a safer digital environment for users and promoting industry-wide best practices.

What is the difference between CASA and traditional security assessments?

CASA assessments are designed specifically for the App Defense Alliance, focusing on app security within the framework's context.

ADA CASA

CASA TIERS

‍TIER 2 Assessments

‍TIER 3 Assessments

Why NetSentries?

Trusted Partner

Contextual Analysis

Post Assessment Support

Research-Oriented Approach

ADA/Google Approved
‍Lab for CASA

Schedule your
Google Cloud Application Security Assessment (CASA) Now

Google Cloud Application‍Security Assessment (CASA)