(Cyber security case study)

I want frameworks, legislation and regulatory requirements of 6 points below

That I can control and measure each of them

1- Demand software quality and security from suppliers. (example which frameworks can use for this recommndation (control and measure)

2- Perform stringent acceptance tests for third-party code.

3- Disable default accounts from applications.

4- Establish a secure operational environment for applications.

5- Implement effective bug-reporting and handling.

6- Perform risk assessments underpinned by strict Governance, risk and Compliance frameworks and legislations.

Thanks