For a secure system or network of systems, your site must have a security policy in place with security practices that support the policy. If you are developing programs or installing third-party programs, you must develop and install those programs securely.
For more information, review the following:
Appendix A, Site Security Policy, in Trusted Extensions Configuration and Administration
Security Requirements Enforcement in Trusted Extensions Configuration and Administration