SOA Application development & Security Standards document template

Question

Hi,
I need to create documents on SOA Application development standards and SAO Application Security standards.
Please share document templates if anyone have them.
Thank you

Answer 1

Hmm, interesting comments. Is it really a Standard that you're after? Not wishing to ask if you like salt with your eggs but I assume we know the differences between Standard, Policy, Procedure? You'd be surprised with the number of so called Security experts /Consultants that can't articulate this. I have seen big 4 people who are meant to be delivering Policy but actually documenting a Standard, even Procedures
So are you looking at delivering a Standard per Application? You should also have a Generic App Security Standard.
Standard - you're looking to no more than 10-20 pages.
SAP hooks into several other documents so you should be explicitly referencing O/S and Database Standards.
Authenticating against SAP - that should be covered in Access Control Policy /Standard.
Encryption ....? Your encryption doc's and so on. 
SAP sits on an O/S, so if you're an IBM house then you're looking at AIX. SAP would assume this as a pre-req. Database? You've got Oracle and if again you're an IBM house you follow DB2.
DB2 inherits numerous priv's from the underlying O/S. So if AIX is poorly configured, then DB2 inherits this. Of course there's a bunch of stuff that you can do from SYS* parameters etc.
I've just put together a bunch of stuff for an Org. The actual SAP piece is actually not that hard. The Procedure is a little more specific e.g. specific Install Accounts /Passwords that need to be changed, how you secure external interfaces.
Please let me know if you need anything further.
Cheers, N