Click 3.3. Web Application_Audit_Principles.pdf link to view the file.