REQ.002 Identify dependencies or components
This document contains the details of the security requirements related to the definition and management of information assets in the organization. This requirement establishes the importance of identifying all system dependencies and components used in information systems.
All dependencies or components used by information systems must be identified.
OWASP-ASVS v3.1-1.5 All app components are defined in terms of the business functions and/or security functions they provide.