OWASP is a not-for-profit industry group not a governmental initiative. However it's generally the most used "standard" for web application security and some r

OWASP is a not-for-profit industry group not a governmental initiative. However it's generally the most used "standard" for web application security and some regulations will use OWASP projects as references for what things should be considered for security