Security & Compliance(CSRF)
Controls that a company implements to protect its assets and meeting the standards that a third-party has set forth as best practices.
Cross site request forgery (CSRF), also known as XSRF, Sea Surf or Session Riding, is an attack vector that tricks a web browser into executing an unwanted action in an application to which a user is logged in.
Prevention
Logging off web applications when not in use
Securing usernames and passwords
Not allowing browsers to remember passwords
Avoiding simultaneously browsing while logged into an application
Denying unauthorized actors access to applications.