Here're examples of things that could be included in such standards: * Passwords should be stored only in salted and hashed form * Code injection attacks shou

Here're examples of things that could be included in such standards: * Passwords should be stored only in salted and hashed form * Code injection attacks shouldn't be possible * Personal data should be stored in anonymized form with mapping between real and virtual id stored separately * Only cryptographic algorithms from the approved list might be used (no MD5)