Page History

...

Regularly conduct routine security audits and compliance checks. This can be helpful in finding all the vulnerabilities and their fix prior to exploitation, thereby helping to reduce the exposure window. A combined automated tool with manual expert reviews provides complete coverage.  There are multiple vendors available that scan for compliance with existing security standards.  We don't recommend any vendor in particular, but for illustration pointers you can look at at https://wwwowasp.qualys.comorg/freewww-services/
more here...community/Vulnerability_Scanning_Tools 

Key Management and Data Encryption Strategies:

Implement strong data encryption strategies to protect sensitive information. Key management should be something that your IT team does for you and utilizes best practices for this, utilizing best practices.  Just like a physical key, you should keep it in a secure location with limited access and take special care not to copy it to digital locations that can be scanned or found, including email systems.  Make sure you have procedures in place.  

You would probably want to encrypt the data at rest with AES-256 and in transit via TLS 1.3.  And remember, key management to encryption is the key.  Every cloud providers provides key management services that help you manage and secure your keys.
example
examples:  

https://aws.amazon.com/kms/

https://cloud.google.com/docs/security/key-management-deep-dive 

https://learn.microsoft.com/en-us/azure/security/fundamentals/key-management

Secure Coding Practices:

Secure code by following secure coding practices and standards, such as OWASP's top ten, for any kind of vulnerability at the code level. Use tools like SonarQube for finding security problems in your source code through static application security testing (SAST) prior to deploying an application. Note that SonarQube has already been integrated into our automation build process.  

Apache Software Foundation has an account with SonarQube and fineract scans can be found in that account.  

...