http://www.pentest-standard.org/ https://www.owasp.org/index.php/The_OWASP_Testing_Framework#Phase_4:_During_Deployment