The above link: https://owasp.org/images/6/67/OWASPApplicationSecurityVerificationStandard3.0.pdf is dead I believe this link: https://owasp.org/www-pdf-archive/OWASP_Application_Security_Verification_Standard_3.0.1.pdf is the correct one