|
|
API endpoint |
SI-10: Information Input Validation |
|
|
API endpoint |
SC-13: Cryptographic Protection |
|
|
API endpoint |
SI-3: Malicious Code Protection |
|
|
API endpoint |
AC-3: Access Enforcement |
|
|
API endpoint |
AU-2: Event Logging |
|
|
API endpoint |
AC-4: Information Flow Enforcement |
|
|
NORA-4: Back Office |
API endpoint |
|
|
BB-13: Security information and event management service |
API endpoint |
| HTTPS (Internal token) |
|
API Gateway |
API endpoint |
|
|
Client application |
API endpoint |
|
|
BB-23: Secure service gateway |
API endpoint |