WebApp Sec: applet security

[test.future () gmail com]

Our auditor advised that controls have to be in place to use applet in web application. I wonder what kind of controls 
is available? I searched owasp but can't find anything. Thanks for any advice.

-------------------------------------------------------------------------------
Watchfire's AppScan is the industry's first and leading web application 
security testing suite, and the only solution to provide comprehensive 
remediation tasks at every level of the application. See for yourself. 
Download AppScan 6.0 today.

https://www.watchfire.com/securearea/appscansix.aspx?id=701300000003Ssh
-------------------------------------------------------------------------------