In one of our previous blogs we talked about the importance of the Authentication & Authorisation pillars of our API Security Framework. Although authentication & authorisation play an important role in API security, there is more to consider when it comes to API security.

As APIs establish an important channel to your enterprise’s systems, data, and services. It's important to keep focus on API security to prevent business/reputation loss, competitor’s gains and so much more. There are numerous aspects that you must consider in securing your APIs.

We recently worked together with an organisation on their API Management Program. They already had a good track record with integration. This was mostly application to application work and some partner integrations as well. However, much of their effort had gone towards the technical aspects of integration, mostly vendor related. Things like architectural oversight and guidance or design patterns were not part of their approach.