ISO/IEC 27001

<p>ISO/IEC 27034 Application Security Controls offers guidance on information security to those specifying, designing and programming or procuring, implementing and using application systems, in other words business and IT managers, developers and auditors, and ultimately the end-users of ICT. The aim is to ensure that computer applications deliver the desired or necessary level of security in support of the organization’s Information Security Management System, adequately addressing many ICT security risks.<br></p>
[view]

ISO/IEC 154082:2005, Evaluation Criteria for IT Security – Part 2: Security Functional Requirements, 2005.
[view]

ISO/IEC 154083:2005, Evaluation Criteria for IT Security – Part 3: Security Assurance Requirements, 2005.
[view]

ISO/IEC 21827, Systems Security Engineering – Capability Maturity Model (SSECMM®), 2002.
[view]

ISO/IEC 15288:2008(E), IEEE Std 152882008, Systems and Software Engineering – System Life Cycle Processes, February 1, 2008.
[view]