[Description] When a method call in your application fails, what does your application do? How much do you reveal? Do you return friendly error information to end users? Do you pass valuable exception information back to the caller? Does your application fail gracefully? [Category] 
Exception Management
I n p u t a n d D a t a V a l i d a t i o n
A u t h e n t i c a t i o n
A u t h o r i z a t i o n
C o n f i g u r a t i o n M a n a g e m e n t
S e n s i t i v e D a t a
S e s s i o n M a n a g e m e n t
C r y p t o g r a p h y
P a r a m e t e r M a n i p u l a t i o n
E x c e p t i o n M a n a g e m e n t
A u d i t i n g a n d L o g g i n g