Security

Make sure that password-protected data only imports if the correct password is provided.

Make sure that the filter handles invalid cases gracefully. The following are some specific recommendations:

• If an incorrect password is given, the application doesn't proceed and returns to the password screen without an "incorrect password" message.
  
  
• A correct password followed by empty spaces should not be accepted as a correct password.
  
  
• If the user clicks Cancel during password validation, the application should returns control to the SBCM import process.