CASA Assessment Preparation Checklist
Use this checklist while preparing your application for a CASA assessment. Items marked as CASA-related prep track controls commonly discussed in CASA/ASVS-oriented reviews; general items are good hygiene that still help an assessment go smoothly. This list is not the official requirement set — follow the current CASA specification and your assessor’s scope.
Application information
Authentication
Authorization
Session security
Want Nexio Watch to check the automatable parts?
CASA Readiness Check — €99 one-time. External checks, questionnaire, prioritized PDF report.
One-time payment. No subscription.
Data protection
Secrets
Dependencies
TLS
Logging
Security testing
Documentation / evidence
Finished the checklist?
Run a readiness check on your application URL before formal assessment.
One-time payment. No subscription.
FAQ
Is this the official CASA requirements list?
No. It is a preparation checklist grounded in common CASA/ASVS themes. The official specification and your assessor’s scope define what you must satisfy.
Do I need to complete every item?
Prioritize what Google and your lab asked for. Use general recommendations to reduce avoidable findings, even when they are not spelled out in your notice.
Can Nexio Watch complete this checklist for me?
We can automate parts of the external technical surface and structure questionnaire-driven findings. AuthZ edge cases, evidence packs, and formal validation remain your team’s and the assessor’s work.
Before you buy
Nexio Watch CASA Readiness is an independent preparation service. Nexio Watch is not an App Defense Alliance authorized assessor. The readiness report does not constitute CASA certification, verification, or an official CASA assessment.