https://greenplus.cloud/knowledge-base/security-standards-in-api-services/