Application Security in the ISO 27001 Environment

Application security is critical because business applications provide direct access to sensitive information, operational processes, and services that organizations rely on every day. Securing applications therefore needs to be addressed as part of the wider information security management system rather than as an isolated development activity.

This ebook explains how to apply ISO/IEC 27001 and ISO/IEC 27002 concepts to software application security, with coverage that includes secure development lifecycles, threat profiling, security testing, secure coding guidance, and the relationship between application controls and an organization wide ISMS.

For CIOs, security professionals, risk managers, and software teams, the publication provides a structured reference for integrating application security into the design, development, testing, and continual operation of an ISO/IEC 27001-aligned security program.